exploit
Ostium's Arbitrum perp DEX drained for up to $18M USDC after oracle-signer key compromise
An attacker with an authorized oracle-signer key and a registered PriceUpKeep forwarder booked twenty round-trip BTC/USD trades, draining ~28% of Ostium's OLP vault; trading paused.