Woofun AI reports that the Ostium RWA trading platform on Arbitrum suffered an estimated $11.86 million loss due to the leakage of an administrator account’s private key. Attackers exploited this vulnerability by opening positions via the openTrade function, manipulating prices through performUpkeep, and closing trades for profit. The successful execution of price manipulation required a signature from an approved account, confirming the private key compromise. Ostium has suspended all transactions while its team investigates the incident.