DeFi Security

Core Summary DeFi protocol Ostium suffered an approximately $18 million security incident. The attacker exploited Ostium’s own price-reporting infrastructure, submitting falsified future-dated oracle data to manufacture fake trading profits and trigger an $18 million payout. On-chain data shows the attacker dispersing stolen funds across multiple wallets after converting USDC into ETH. Ostium has paused trading in response to the incident. Event Details According to CoinDesk and The Block, this attack is part of a recent wave of oracle manipulation attacks targeting DeFi protocols. The attacker exploited Ostium’s price-reporting mechanism by submitting false future-dated data to the system, creating fraudulent trading profit records within the protocol and successfully triggering the $18 million fund withdrawal. ...

Core Summary Security platform Immunefi’s latest report shows that the crypto industry faced a record 207 hacking incidents in the first half of 2026, but total losses fell to $972 million, below the $1 billion threshold. Notably, losses from DeFi protocol exploits dropped 74% from the 2022 peak, reflecting overall improvement in industry security levels. Event Overview According to TheBlock, despite record-high attack counts, the average loss per incident decreased significantly. This indicates that while attackers are more active, large-scale catastrophic exploit incidents have decreased. The proliferation of security audits, bug bounty programs, and insurance mechanisms is proving effective. ...

Cross-chain interoperability protocol LayerZero acknowledges primary responsibility for a $292M exploit affecting KelpDAO, reversing its initial framing of the incident as a developer configuration failure.