Ostium Hack:$23.8M Stolen
July 15, 2026 · Arbitrum
Reported by DeFiLlama
As of 2026-10-11 14:31 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.
Attacker address
0x321df194646029e7a6193ea05573d4b9c398bfd9
On-chain check: arbitrum receipt: status 1, 2026-07-15 14:18:48 UTC; five native-USDC (0xaf88…5831) Transfers from the OLP vault 0x20d4…7f98 to 0x321d…bfd9 totalling 11,862,… USDC — rekt's 'main exploit transaction ($11.86M)'
Exploit transaction: 0x359f8c05…7d4870e0
Sources: rekt.news · defiprime.com
Recipient of the vault payouts (rekt: 'Exploiter Address'). NOT the Ostium verifier/signer keys, which search summaries mislabel as the attacker.
Traced by ChainHint — Traced Outflow
$27.4Mreached 35 endpoints
67 nodes · 330 edges
Largest destinations: Tornado Cash, ostium, MetaBridge, Morpho, Uniswap — as labelled in our database; not all of these labels are verified.
In ChainHint's incident archive
No earlier incident at Ostium is recorded in our archive.
Key compromise — 10 incidents of this kind in the 90 days before this page was built, $540M in total, among the incidents ChainHint lists.
Ostium hack: the facts
- How much was stolen in the Ostium hack?
- DeFiLlama reports $23.8M stolen from Ostium on arbitrum.
- Who was hit in the Ostium hack?
- Ostium, on arbitrum, on July 15, 2026. Attack type: key compromise.
- Where did the Ostium funds go?
- ChainHint traced $27.4M to 35 endpoints, including Tornado Cash, ostium, MetaBridge (as labelled; not all labels are verified).
Related hacks
All hacks →
Investigate your own incident
Trace the path of funds across 12 chains on public blockchain data.