Blockaid

ApeMars

2026-07-22 13:55:13

ApeMars Flagged as Honeypot by Blockaid on Uniswap: What APRZ Holders Must Know

Uniswap now shows Blockaid's potential honeypot warning for ApeMars' APRZ token, alongside missing chart data. Contrasting DeepSnitch precedent, the team remains silent. Holders advised not to trade and to watch for scams.

510

Ostium

2026-07-17 05:32:11

Ostium hit by oracle report exploit as five-minute incident drains up to $24 million

Onchain perpetuals platform Ostium said a five-minute security incident hit its public Ostium Liquidity Provider, or OLP, vault on July 15 between 14:18 and 14:23 UTC. Third-party security firms said the issue was not a missing signature. Instead, they said a registered PriceUpKeep forwarder submitted authorized oracle reports carrying future timestamps, which then generated false trading profits. Public loss estimates vary. Blockaid put the payout near $18 million, Cyvers estimated $23.7 million, and PeckShield later said about $24 million had been drained. SlowMist cited a lower figure of $11.86 million, apparently based on a visible vault outflow of 11,862,444.782 USDC in a referenced transaction. Ostium co-founder Kaledora Kiernan-Linn said the team detected the issue within minutes and coordinated a trading pause within an hour. She also said the protocol is working with law enforcement, SEAL 911, and outside security experts. Ostium has not yet published a final loss total, root-cause analysis, or post-mortem report. The case differs from Bonzo Lend’s recent Hedera incident, where the validator reportedly accepted a proof without a valid signature. In Ostium’s case, security firms said authentication passed, but the data itself was unsafe.

1450

Ostium

2026-07-15 17:01:25

Ostium loses about $18 million after oracle signer key compromise, Blockaid says

Ostium, a decentralized perpetuals exchange built on Arbitrum, lost roughly $18 million on Wednesday after attackers compromised an oracle signer key and manipulated the platform’s price feed, according to blockchain security firm Blockaid. The firm said the attacker used a registered PriceUpKeep forwarder and future-dated authorized oracle reports to fabricate trading profits, which then triggered a multi-million USDC payout from Ostium’s OLP liquidity vault. Ostium acknowledged the issue on X, said it had paused all trading, and noted that its team was investigating. At the time of the attack, Ostium held about $63 million in total value locked, putting the loss at close to one-third of protocol liquidity. The exchange offers decentralized perpetual futures tied to real-world assets such as stocks, commodities, foreign exchange markets, and indices. The incident lands in a year that has already seen heavy losses across decentralized finance. Decrypt reported that more than $840 million was stolen from DeFi protocols in the first five months of 2026, including $292 million from KelpDAO and $285 million from Drift Protocol, while Resolv Labs lost more than $25 million in June. The report also highlighted security warnings that advances in artificial intelligence are speeding up vulnerability discovery, with ThreatLocker CEO Danny Jenkins and security researcher Taylor Hornby pointing to AI’s growing ability to uncover complex software flaws.

1450

Ostium

2026-07-15 16:12:18

Ostium Halts Trading After Oracle Exploit, With OLP Vault Loss Estimated at Up to $18 Million

Ostium, an Arbitrum-based perpetuals protocol focused on real-world assets, halted all trading on Wednesday after an attack tied to its oracle and keeper infrastructure drained USDC from its OLP liquidity vault. Blockchain security firm Blockaid said the attacker used a registered PriceUpKeep forwarder together with future-dated authorized oracle reports to manufacture trading profit and trigger a payout of about $18 million. The cited exploit transaction, 0x359f8c05...d4870e0, and the attacker address were both identified on Arbitrum. Other onchain observers have put the loss lower, with some estimates near $11.86 million, while Ostium has not yet released its own accounting. Data from DefiLlama showed Ostium held roughly $63.3 million in total value locked shortly before the incident. The protocol confirmed the issue, paused all markets, and said its team was investigating. The case also raises questions about trust assumptions around keeper and oracle systems, especially because Ostium’s bug bounty scope had treated registered keepers and their forwarders as trusted components.

1440

Blockaid

2026-07-15 01:13:56

Blockaid warns BarnBridge legacy proposals may expose token approvals

Blockaid has issued a community alert over legacy governance proposals #14 and #15 tied to BarnBridge Smart Yield, saying they carry token approval risk. The security firm said existing approvals could be put at risk if the proposals are executed maliciously or upgraded. No loss of funds has been confirmed so far, but users were urged to review and revoke related approvals on Ethereum as soon as possible. Proposal #14 is now in its executable grace period, while proposal #15 has been queued and is expected to execute on-chain at 09:23:58 UTC on July 16. Tokens named in the alert include USDC, DAI, USDT, GUSD and RAI, with the relevant contract addresses already disclosed. Blockaid also warned users not to trust links in replies or accounts claiming to offer support, and said revocations should only be carried out through trusted approval management tools.

1310

Arbitrum

2026-07-13 10:57:42

Blockaid flags attack on Lumi Finance on Arbitrum, about $270,000 moved out

Lumi Finance, a protocol on Arbitrum, is currently under attack, according to monitoring cited by ChainCatcher from blockchain security firm Blockaid. Roughly $270,000 has already been transferred out at the time of the alert. The brief update did not include technical details about the exploit, the destination of the funds, or any response from the project team. With the available source limited to the initial monitoring notice, no additional impact, cause, or timeline beyond the reported outflow was disclosed.

1860

Blockaid

2026-07-13 10:54:56

Blockaid says Lumi Finance on Arbitrum appears under attack, with about $270,000 lost

Security firm Blockaid said Lumi Finance, a protocol on Arbitrum, appears to be under attack, with losses so far estimated at about $270,000. According to Blockaid, the issue stems from a side effect tied to token approvals during UserOp verification in Sodium smart accounts. The attacker was able to control the paymaster and spender, then obtain approval allowances from a large number of accounts before withdrawing funds. Blockaid added that the incident was still ongoing at the time of its update. The statement was posted on X and did not indicate that the attack had been contained.

1700

Summer.fi

2026-07-06 05:40:09

Blockaid Says Summer.fi Was Exploited, With About $6 Million Lost

Blockchain security firm Blockaid reported that DeFi yield protocol Summer.fi has suffered an exploit, with estimated losses of around $6 million. Publicly available information remains limited at this stage, and no detailed breakdown has yet been disclosed regarding the attack vector, the affected assets, or the protocol’s mitigation steps. The alert was first posted by Blockaid on X. Further updates from Summer.fi or other security monitors have not been included in the initial notice.

1210