Ostium Pauses Trading After $23.75M Exploit, Funds Laundered via Tornado Cash
On July 16, 2026, Ostium, an on-chain perpetual trading protocol, paused trading after a security incident between 14:18 and 14:23 UTC. The protocol locked trading contracts, leaving user positions open but unmodifiable and margin untouched. On-chain trackers Lookonchain and Arkham reported that approximately 23.75 million USDC was drained, swapped for 12,084 ETH (average price $1,966), and most ETH was deposited into Tornado Cash via intermediary addresses. The exploit highlights vulnerabilities in DeFi valuation layers, particularly for protocols trading stocks, commodities, and forex. Ostium has not disclosed the technical cause or recovery timeline, focusing on investigation and fund tracking.
Key facts
- Ostium paused trading on July 16, 2026, after a security incident from 14:18 to 14:23 UTC.
- Approximately 23.75 million USDC was drained from Ostium.
- The stolen USDC was swapped for 12,084 ETH at an average price of $1,966.
- Most ETH was transferred to Tornado Cash via intermediary addresses.
- User positions remain open but unmodifiable; margin is untouched.
- Ostium has not specified the technical cause or recovery timeline.
- The incident raises questions about DeFi resilience and oracle risk.
- Ostium is an on-chain perpetual trading protocol for stocks, commodities, and forex.
Entities
Institutions
- Ostium
- Lookonchain
- Arkham
- Tornado Cash
- NFT Plazas