Ostium, a perpetuals trading protocol built on Arbitrum, plans to reopen its platform on July 23, exactly one week after an exploit drained roughly 23.8 million USDC from its liquidity provider vault.
What happened
The attack on July 15 targeted the protocol's liquidity provider (LP) vault. The stolen funds, all in USDC, represented a significant portion of the vault's assets. Ostium did not disclose the exact amount remaining or whether user funds were affected beyond the LP pool.
Why the pause
Immediately after detecting the exploit, Ostium halted trading and deposits. The team said it needed time to assess the damage and secure the platform before allowing users to trade again. The one-week pause was intended to give developers room to patch vulnerabilities and restore confidence.
What's in the patch
Ostium has not released technical details of the fix. The protocol's smart contracts on Arbitrum are expected to be updated before the reopening. Users will likely need to approve new contract addresses or migrate liquidity. The company said it will share a post-mortem after trading resumes.
Traders who had positions open at the time of the exploit may face settlement at the paused price. Liquidity providers who deposited into the affected vault could see losses. Ostium has not announced a compensation plan. The reopening on July 23 will be a test of whether the community trusts the protocol again.
The exploit is the latest in a string of attacks on DeFi perpetuals platforms. Arbitrum-based protocols have been frequent targets due to the high value locked in their LP pools. Ostium's quick restart suggests the team believes the vulnerability is contained, but questions remain about how the attacker gained access and whether any funds can be recovered.
