Security company Blockaid said it detected an attack on Arbitrum-based RWA perpetual trading protocol Ostium Vault. The attacker used a registered PriceUpKeep Forwarder and oracle reports with future-dated authorizations to create fake trading profits, triggering a vault payout of about 18 million USDC. The relevant attack transactions and addresses have been made public, and the incident is still under further investigation. Ostium is a protocol focused on trading real-world asset (RWA) perpetual contracts such as stocks, commodities, and foreign exchange; it has raised roughly $28 million in total funding. Investors include General Catalyst, Jump Crypto, Coinbase Ventures, Wintermute, and GSR, among others.