Blockaid said it detected an exploit of an Ostium Vault on Arbitrum that triggered a roughly $18M USDC payout, publishing the exploit tx and attacker address.

A hacker used Ostium's own price-reporting infrastructure against the protocol, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an…

Onchain data shows the Ostium attacker dispersing the stolen funds across multiple wallets after converting USDC into ETH.