Ostium's $18m exploit was a stolen oracle key
Someone got the private key that signs Ostium's price oracle reports. with that key they pushed fake, future dated price data through ostium's automation system (a contract called PriceUpKeep, triggered by gelato) that made their trades look profitable when they …