Ostium 攻击复盘：链下预言机权限被盗，伪造 BTC 价格套利 2375万 USDC

Ostium 攻击复盘：链下预言机权限被盗，伪造 BTC 价格套利 2375万 USDC

2026-07-30 08:46

ChainThink 消息，7 月 30 日，据 Ostium 官方报告，此次攻击核心为链下价格报告系统权限遭入侵，并非智能合约漏洞。

攻击者获取链下授权后，利用协议已注册的合法转发路径，向 BTC-USD 市场提交 5,000 美元与 60,000 美元的伪造价格，并在同一交易内完成开仓和平仓套利循环。

攻击者以 100 USDC 起步滚动放大规模，历经 8 笔交易，在 5 分钟内从 OLP 金库套取 2375 万 USDC，直至金库熔断机制触发。

报告称，根本原因在于链下基础设施缺乏与链上多签同等级别的多方审批机制，形成单点权限漏洞。被盗资金已转换为 ETH 并经 Tornado Cash 混币，追踪工作仍在进行中。

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

NVIDIA attracts $85 billion in investor demand during massive bond issuance

06-16
NVIDIA attracts $85 billion in investor demand during massive bond issuance

Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

06-16
Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

06-16
Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

06-16
Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

06-16
Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

06-16
Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability

06-15
SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability