DEX EVIDENCE INTERFACE
Ostium
Onchain perpetual instruments on Arbitrum with USDC settlement, in-house oracle, OLP vault, and offchain institutional hedging.
How does this DEX actually work?
Structural flow from documented architecture — not a performance or safety claim.
- Trader
USDC from self-custodied wallet
- RFQ / partner quote
No resting order book (docs)
- Onchain settlement
Open/close/liquidate on Arbitrum contracts
- Ostium consensus oracle
In-house pull oracle for entry/exit/liquidation
- Offchain hedge layer
Institutional partners (e.g. Jump cited) hedge net delta
- Daily settlement
USDC rebalance between vault buffer and hedge book
Where is collateral held?
Follow the path from wallet to settlement. Smart-contract custody is still custody risk.
- User walletUser wallet (USDC)
- DepositSegregated smart contracts
- VaultOLP settlement vault
- ExternalOffchain hedge book (operational USDC flow)
- SettlementInstant onchain PnL to wallet
Custody model: Smart-contract custody — Not labeled simply “non-custodial.” Unknown edges stay Unknown.
Key structural facts
- Liquidity model
- RFQ + OFFCHAIN HEDGE + OLP VAULT
- Counterparty
- Instant settlement via OLP; directional risk hedged with institutional partners
- Chain / settlement
- Arbitrum · On-chain
- Chains
- Arbitrum
Docs: OLP is settlement working capital, not directional counterparty of flow
Who controls what?
Governance processes do not by themselves prove decentralized operational control.
Operational admin
Roles that can change contracts, parameters, or day-to-day operations.
- Proxy / upgrade admin
Controller ProxyAdmin 0x083F97BabF33D4abC03151B5DEc98170761f4025
Mechanism Upgradeable proxy pattern — who controls ProxyAdmin EOA/multisig not fully named
Timelock TimeLockOwner listed on testnet; mainnet timelock controller RESEARCHED_UNRESOLVED
- Oracle operation
Controller Ostium Labs (in-house consensus oracle)
Mechanism Multiple publishers → consensus price onchain
Timelock Unknown / none documented
- Liquidation automation
Controller Permissionless keepers (docs)
Mechanism Automated keepers
Timelock Unknown / none documented
- Emergency / market freeze
Controller Ostium Labs (docs: remediation may include market freeze)
Mechanism Described in audit FAQ — not a formal onchain pause mapping
Timelock Unknown / none documented
Protocol & operator surfaces
- ProtocolNo verified legal name on this surface
Audited smart contracts on Arbitrum
Handles trades and holds collateral in contracts
Verified structured - Developer entityOstium Labs Co.
Company developing protocol / services (privacy policy)
Named with Ostium Foundation in privacy policy; does not custody per architecture docs
Verified structured - FoundationOstium Foundation
Named with Labs in privacy policy
Jurisdiction / corporate registry details RESEARCHED_UNRESOLVED
Verified not structured - Frontend operatorLegal operator unresolved
app.ostium.com / Bot Services under Terms
Terms restrict App/Bot trading for Restricted Persons
Verified structured
How are prices determined?
Oracle provider presence is not a claim that the oracle is secure or endorsed.
- Primary oracle
- Ostium in-house consensus oracle
- Price / index construction
- Multiple independent publishers sign; consensus published onchain
- Fallback
- Chainlink Data Streams noted for crypto in older GitBook; confirm current primary docs
- Update mechanism
- Pull / on-demand when trader opens; sub-second RWA feeds
- Dependencies
- Ostium Labs oracle ops · Market data providers · Institutional quote partners
- Last verified
- 2026-08-30 · Verified structured
What happens if margin falls too low?
Liquidation mechanics in plain language — not a guarantee of user outcomes.
- Maintenance / trigger
- Collateral below maintenance margin
- Partial / full
- Liquidation when threshold breached (docs)
- Liquidator / keeper
- Permissionless automated keepers
- Liquidation fee
- Unknown
- Insurance / backstop
- Junior buffer before OLP senior loss; OLP not insured
- Bad debt handling
- Subordination structure described; not a solvency guarantee
Insurance or buffer existence is not a solvency guarantee. · Verified structured
Who is on the other side of the trade?
Counterparty models differ by protocol — not every perpetual DEX shares the same structure.
RFQ + OFFCHAIN HEDGE + OLP VAULT
Counterparty Instant settlement via OLP; directional risk hedged with institutional partners
Docs: OLP is settlement working capital, not directional counterparty of flow
Verified structuredFees
Snapshot mechanisms and rates where documented. Not labeled cheapest or best value. Funding ≠ borrow unless documented.
- opening3–10 bps of notional by asset class (e.g. FX 3 bps, crypto 10 bps)
- oracle$0.10 USDC flat per price request (refunded on successful full close)
- rolloverVariable continuous fee from underlying carry + Ostium premium
- early close0–40 bps of notional on profitable closes within 15s; capped at profit
- liquidationRemaining collateral taken on liquidation
Ostium documents rollover fees from real-world financing — distinct from crypto funding-rate products unless explicitly mapped.
What markets does Ostium support?
Only officially supported classes from primary evidence. Presence is not a recommendation.
- CryptoSupported
- FXSupported
- CommoditiesSupported
- IndicesSupported
- StocksSupported
- ETFsSupported
75 pairs cited in How Ostium Works (2026-07-22 docs)
Structured for possible future VenueVeritas↔FXVeritas research link — not a cross-site claim.
Security evidence
Smart-contract audits are not financial audits. No combined “audited” badge. No security score.
Smart-contract audits
Security reviews
- Pashov Audit Group2025-01 / 2025-04 / 2026-01 · Trading/vault/oracle/liquidation; Jan 2026 post-JLU 13 contractsVerified structuredSource
Bug bounty
- Immunefi (Ostium program)Date unknown · Responsible disclosure via Immunefi per audits pageVerified structuredSource
Material incidents
None structured in this pack (not a claim that none occurred).
Access surfaces
Protocol access, frontend access, and terms eligibility are separate. Not “available globally” unless evidenced.
- Protocol access
Architecture docs: contracts remain callable if interface down — permissionless network access ≠ terms eligibility.
Verified structuredSource - Frontend access
Terms: use of the App or Bot for trading is not permitted for Restricted Persons (US, UK, EU, Philippines, comprehensive US-sanctioned territories).
Verified structuredSource - Terms of service
Official Terms of Use Restricted Jurisdictions language covers App/Bot/Services trading — VPN circumvention prohibited.
Verified structuredSource - Geo block
Technical geo-block mechanism not separately documented beyond Terms Restricted Person rules.
Researched unresolvedSource - Legal eligibility
Terms eligibility ≠ regulatory authorization evidence.
Verified structuredSource
Direct answers
How does Ostium offer FX and commodity markets?
Synthetic perpetual instruments priced by Ostium's consensus oracle from market data providers; settlement in USDC onchain while net directional exposure is hedged offchain with institutional partners.
What oracle does Ostium use?
An in-house consensus oracle operated with Ostium Labs, publishing agreed prices onchain for opens, closes, and liquidations.
Where is Ostium collateral held?
USDC in audited smart contracts / OLP settlement vault on Arbitrum. Offchain hedge books move operational USDC at daily settlement — trader collateral remains described as self-custodied in contracts.
Who operates Ostium?
Docs separate Protocol (contracts), Interface (app.ostium.com), and Ostium Labs (developer). Frontend legal operator jurisdiction remains LEGAL_OPERATOR_UNRESOLVED beyond the Labs label.
What does this DEX depend on?
Material dependencies only. Dependency count is not a risk score.
- BlockchainArbitrumSettlement
- StablecoinUSDCCollateral
- Lp VaultOLP vaultIntraday settlement
- OracleOstium consensus oraclePricing
- Market MakerInstitutional hedge partnersNet delta hedge
Contracts (primary-sourced)
- ProxyAdmin (Arbitrum): 0x083F97BabF33D4abC03151B5DEc98170761f4025 — Proxy admin for upgradeable contracts
- Vault (Arbitrum): 0x20D419a8e12C45f88fDA7c5760bb6923Cee27F98 — OLP / settlement vault
- Trading (Arbitrum): 0x6D0bA1f9996DBD8885827e1b2e8f6593e7702411 — Trading execution
Open gaps
- ProxyAdmin ultimate controller EOA/multisig identity not named
- Foundation/Labs Co. jurisdiction registry details unresolved
- Frontend legal operator label beyond Labs/Foundation brands unresolved
Primary sources
DEX Architecture / Control / Custody evidence only. No DEX score. Unresolved states remain unresolved.