Ostium

Ostium receives a C- risk grade (52/100) from Hindenrank, where lower scores indicate lower risk. High risk — confirmed $23.75M oracle key compromise in July 2026 drained the LP vault; funds unrecovered and laundered through Tornado Cash. Off-chain oracle infrastructure remains excluded from audits and bug bounty, leaving the same structural vulnerability in place. Ostium is a perpetual trading platform on Arbitrum enabling leveraged trading of stocks, currencies, indices, and commodities on-chain. On July 15, 2026, an attacker compromised the protocol's oracle signing key and drained $23.75M from the liquidity vault in five minutes; stolen funds were laundered through Tornado Cash and remain unrecovered. Backed by $24M from General Catalyst and Jump Crypto, the protocol paused for 8 days and resumed trading July 23. Its C- grade reflects the confirmed oracle key compromise, a structural audit gap over off-chain infrastructure, and ongoing LP solvency concerns.

The key risks identified for Ostium are: (1) On July 15, 2026, Ostium's oracle signing key was compromised and $23.75M was drained from the LP vault in five minutes. The stolen funds were laundered through Tornado Cash and remain unrecovered. The oracle infrastructure was explicitly excluded from all security audits and the bug bounty program. (2) RWA perpetual profits and losses are settled via liquidity pools, not underlying assets. The hack reduced the LP pool from ~$32.7M to ~$9M (72% drawdown) before partially recovering to ~$21M. LP solvency and confidence remain key risks for payout reliability. (3) Offering synthetic exposure to regulated securities on a decentralized platform creates regulatory uncertainty, compounded by hack proceeds routed through Tornado Cash, which may attract enforcement attention.

Ostium scores 52/100 across eight risk dimensions: Mechanism Novelty: 6/15, Interaction Severity: 6/20, Oracle Surface: 8/10, Documentation Gaps: 2/10, Track Record: 15/15, Scale Exposure: 5/10, Regulatory Risk: 5/10, Vitality Risk: 5/10. The highest risk area is Track Record at 15/15.

Among 57 rated Derivatives protocols on Hindenrank, Ostium ranks #52 by safety (lowest risk score = safest). Its 52/100 risk score and C- grade place it among the riskier Derivatives protocols.

Ostium scores 15/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.