---POST---
Ostium has revealed that its recent $23.75 million USDC drain was caused by a breach in its off-chain price report system, not a smart contract vulnerability. According to ChainCatcher, the attacker exploited off-chain authorization by using legitimate relay paths to submit manipulated BTC-USD prices of $5,000 and $60,000 within the same transaction. This enabled a sophisticated atomic arbitrage loop, which was executed before Ostium could respond.
For the BNB Chain ecosystem, this incident underscores the importance of securing off-chain data sources and relay mechanisms, especially as DeFi protocols increasingly rely on external data feeds for operations. As DeFi continues to grow, ensuring the integrity of off-chain systems becomes critical to prevent exploits that can lead to significant financial losses. This event serves as a reminder that robust security practices for data oracles and relay nodes are vital in safeguarding decentralized financial systems against sophisticated attacks.