Ostium paused all trading after Blockaid reported that an attacker used future-dated oracle reports to trigger an estimated $18 million USDC payout from the protocol's OLP vault.