# Пов'язані статті щодо Exploit

Центр новин HTX надає останні статті та поглиблений аналіз на тему "Exploit", що охоплює ринкові тренди, оновлення проєктів, технологічні розробки та регуляторну політику в криптоіндустрії.

Prices From the Future Fool the Oracle, Ostium Drained of $24 Million in Five Minutes

Ostium, a perpetual trading platform, suffered a security incident on July 15, resulting in significant losses from its public liquidity vault. Initial analyses from Blockaid, Cyvers, and PeckShield estimate losses of up to $24 million. The exploit occurred over a five-minute window. According to security firms, the core issue was not a missing signature, but a data integrity failure: a registered price oracle (PriceUpKeep) submitted authorized price reports with manipulated future timestamps, creating false trading profits. The protocol’s verification process confirmed the signatures as authorized but did not enforce price sanity checks or timestamp boundaries, allowing the manipulated data to be accepted for settlement. This caused the liquidity vault to pay out on these fraudulent profits. Ostium’s co-founder confirmed the team paused trading within an hour and is collaborating with law enforcement and security experts. The extracted funds were reportedly swapped for ETH, with a portion moved to Tornado Cash. The incident highlights risks in DeFi oracle designs where cryptographic signature verification is insufficient without additional safeguards for data validity, timestamp freshness, and price reasonableness. Ostium's response and planned fixes—including stricter timestamp validation, independent price checks, and circuit breakers—will be critical to preventing similar exploits.

marsbit07/17 05:33

Prices From the Future Fool the Oracle, Ostium Drained of $24 Million in Five Minutes

marsbit07/17 05:33

活动图片