DeFi protocol Ostium has suffered an $18 million exploit, according to CoinDesk. The report says the attacker turned Ostium’s own price-reporting infrastructure against the protocol by submitting falsified oracle data dated in the future. That manipulated input was then used to manufacture fake trading profits inside the system and trigger an $18 million payout. The incident comes as oracle-related attacks continue to affect DeFi protocols. CoinDesk identified the case as part of a broader wave of oracle attacks hitting the sector. The article was written by Oliver Knight and edited by Cheyenne Ligon, with publication timestamped July 15, 2026.
DeFi protocol Ostium suffered an $18 million exploit, according to CoinDesk. The attacker used Ostium’s own price-reporting infrastructure against the protocol, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an $18 million payout.
The exploit centered on manipulated oracle submissions
CoinDesk reported that the hacker did not rely on an outside pricing feed. Instead, the attack used Ostium’s own reporting system, with falsified oracle data carrying future dates. That input created artificial trading gains inside the protocol and led to the $18 million payout.
The incident adds to an ongoing run of oracle attacks affecting DeFi. Based on the information disclosed in the report, the exploit worked by corrupting oracle data in a way that altered trading outcomes within the protocol itself.
The article was written by Oliver Knight and edited by Cheyenne Ligon. CoinDesk published it on July 15, 2026.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
