Woofun AI reports that Ostium, an Arbitrum-based perpetual futures platform, suffered a $23.75 million loss after attackers bypassed its secure smart contracts and multisignature wallet to drain the OLP vault.

The breach occurred earlier this week, exploiting vulnerabilities within off-chain infrastructure rather than on-chain code. Attackers targeted the backend infrastructure responsible for data processing and order management, successfully draining funds from the OLP vault which holds liquidity provider assets.

Despite the significant financial loss, Ostium confirmed that its core smart contracts and multisig governance mechanisms remained uncompromised. Trading and withdrawals have been paused as the platform collaborates with security firms and law enforcement to trace the stolen assets and secure the remaining system.

This incident exposes a systemic weakness in decentralized finance, where robust smart contract audits often overlook centralized or semi-centralized backend services. Critical functions such as price feeds, order matching, and user interface management remain attractive targets due to their reliance on less secure off-chain components.

Security experts emphasize the necessity of comprehensive security audits covering both on-chain and off-chain components. Liquidity providers and traders are advised to monitor official Ostium channels for updates, as the platform has not yet announced compensation plans for affected users.

The Ostium hack signals a strategic shift toward holistic defense strategies within the DeFi community. Future protocols will likely prioritize real-time monitoring, redundancy, and stricter access controls to protect every layer of the technology stack.