Ostium introduced on October 1 that it’s revamping its trading setup utilizing Gateway, a brand new system that gives larger velocity of execution, a unified margin, and security measures in its infrastructure.
This method is launched about three months after the theft of $23.75 million from its liquidity vault, placing strain on the Arbitrum platform to show that it has mounted the issues that resulted within the breach in July.
What Ostium says Gateway modifications
In a post on X on October 1, Ostium framed Gateway as greater than only a patch. The platform says it’s going to hold the institutional connectivity launched earlier this yr and can enhance the execution course of and margin administration.
In July, Cryptopolitan reported that Ostium’s decentralized execution layer facilitated the method of sending on-chain orders to institutional companions off-chain to assist with hedging. In line with Marco Antonio Ribeiro—the co-founder and CTO of the corporate—your complete setup has been designed for latencies of underneath 100 milliseconds.
The announcement about Gateway got here after Ostium shared an replace on its OLP recovery plan on September 30—which illustrated the connection between reimbursement of the drained pool and rebuilding of your complete trading stack.
How the attacker drained the vault
In line with Galaxy Research, the hacker managed to achieve entry to 2 trusted parts of Ostium’s system – an accredited oracle signer key and a registered PriceUpKeep forwarder. With the 2, the hacker was in a position to submit a correctly signed worth report bearing a later timestamp, have it verified, and repeatedly open and shut trades towards that false worth.
In line with Galaxy, the verifier for Ostium checked if the signatory had the authorization for the transaction however not whether or not the worth was legitimate. The $23.75 million quantity was transferred in eight separate transactions to a single crypto pockets; the largest transaction was carried out as an atomic collection of repeated open-and-close cycles.
Why the repair is a belief drawback, not a code drawback
In line with Galaxy, the case of Ostium illustrates an even bigger subject: even when the good contracts perform correctly, criminals can nonetheless goal people, credentials, and infrastructure linked to the good contracts.
“Throttling withdrawals introduces censorship threat immediately on the software layer.”— Galaxy Research
As an alternative, Galaxy argued for stronger signer-key administration, verifier redundancy and admin timelocks.
This subject is illustrated by the TRM Labs data for the primary half of 2026, by which there have been 207 hacking incidents and losses amounting to $972 million. Though infrastructure and operational breaches solely made up round 15% of the incidents, they had been chargeable for roughly 76% of the losses.
A safety check for a $3 trillion market
In line with analysis from CoinMarketCap, the whole quantity of real-world asset (RWA) perpetuals was recorded at $3.16 trillion as of August 31. Amongst them, August accounted for $799.5 billion of the whole quantity, with shares chargeable for 62.3% of the amount.
As of the primary of October, DefiLlama’s RWA perpetuals dashboard indicated that open curiosity was $5.34 billion throughout 1,037 markets. The dashboard reveals a complete of RWA perpetuals, excluding centralized-exchange RWA perpetuals by default.
CoinMarketCap has additionally found that centralized exchanges have begun to accumulate an even bigger market share in RWA perpetual trading actions. Thus, Ostium now has a transparent problem for Gateway – to supply merchants with the requisite velocity and capital effectivity, whereas on the similar time guaranteeing that the know-how behind this platform can’t be breached simply.
Don’t simply learn crypto information. Perceive it. Subscribe to our e-newsletter. It’s free.
