Hacked Perp DEX GMX to Repay $44M to Arbitrum GLP Holders After Exploit

Decentralized perpetuals exchange GMX said Wednesday that users hit by last month’s security breach can now claim compensation through its dApp.

Key Takeaways:

  • GMX is distributing $44M to fully compensate Arbitrum GLP holders impacted by last month’s $42M exploit.
  • The breach stemmed from a reentrancy vulnerability in GMX V1’s contract structure.
  • Compensation will be in GLV tokens with extra rewards for users who hold them for at least three months.

“About $44 million in value is being distributed, making all impacted Arbitrum GLP holders whole and marking a favorable resolution to the security challenge GMX faced,” the project said.

The payout combines recovered funds with $2 million from GMX’s treasury.

GMX V1 Exploit Drains $42M via AUM Manipulation Vulnerability

The incident occurred on July 9, when GMX V1’s GLP pool on Arbitrum was exploited for $42 million.

At the time, blockchain security firm PeckShield attributed the loss to a reentrancy vulnerability that let the attacker manipulate the protocol’s assets-under-management (AUM) calculations, enabling them to withdraw more than their deposits.

GMX also confirmed that the $42 million exploit was caused by a re-entrancy vulnerability within its V1 contracts.

Although the affected function was protected by a nonReentrant modifier, it only applied within the same contract, allowing the attacker to bypass this safeguard and manipulate the BTC average short price through the Vault contract.

By exploiting this loophole, the attacker artificially drove the GLP price up and profited by redeeming inflated GLP tokens after opening a large position using a flash loan.

The vulnerability was tied to how GMX V1 handled pricing calculations across separate contracts, a structure that has been revised in GMX V2, where calculations and executions now occur within the same contract to avoid such risks.

In response, GMX paused trading on Avalanche, engaged with security partners and major infrastructure providers, and initiated direct on-chain communication with the exploiter.

Hours after the breach, GMX sent an on-chain message offering a 10% white-hat bounty if 90% of the stolen funds were returned, an offer the attacker accepted.

Compensation will be issued in GLV, GMX’s upgraded liquidity vault product for V2. Eligible claimants will receive equal portions of GLV [BTC-USDC] and GLV [WETH-USDC], reflecting roughly 25% Bitcoin, 25% Ether, and 50% stablecoins, mirroring the original GLP asset mix.

In addition, GMX has launched a $500,000 GLV incentive pool for users who hold their distributed GLV for at least three months without selling or transferring, offering pro-rata rewards to long-term holders.

Crypto Hacks, Scams Cost Investors $2.2B in H1 2025: CertiK

Crypto investors lost over $2.2 billion to hacks, scams, and breaches in the first half of 2025, driven largely by wallet compromises and phishing attacks, according to CertiK’s latest security report.

Wallet breaches alone caused $1.7 billion in losses across just 34 incidents, while phishing scams accounted for over $410 million across 132 attacks.

Two major incidents, including Bybit’s $1.5 billion hack in February and Cetus Protocol’s $225 million exploit in May, skewed the year’s losses upward, together accounting for nearly $1.78 billion.

Without these, losses align more closely with previous years at around $690 million.

Ethereum remained the primary target, suffering over $1.6 billion in losses across 175 events.

The report also pointed to rising sophistication of phishing schemes and ongoing risks from social engineering, urging crypto users to verify links, avoid suspicious sites, and use hardware wallets.

Follow us on Google News

Trending News RecommendedPopular Crypto TopicsPrice Predictions

  • How Tether Co-Founder William Quigley Views Crypto Regulations in Trump’s Second Term
  • Trump Appoints PayPal Veteran David Sacks as ‘White House AI and Crypto Czar’
  • XRP Mining Launches Next Generation Mobile App That Transforms Smartphones into Cloud Mining Hubs
  • New ChatGPT Predicts the Price of XRP, Pepe and Dogecoin by the End of 2025
  • [LIVE] Ripple Forecast: Is the $10 XRP Rally About to Ignite? The Most Important Crypto News on XRP and Top Altcoins in Our Live Updates

Price Analysis

XRP Price Prediction: Veteran Analyst Declares XRP a Must-Buy – Charts Point to Explosive Upside

2025-08-13 17:09:01, by Alejandro Arrieche

Price Analysis

Ethereum Price Prediction: Record-Breaking Institutional Trading Signals $10K ETH Ahead

2025-08-12 17:15:26, by Simon Chandler

Price Analysis

Bitcoin Price Prediction: Long-Term Holders Refuse to Sell – Next Leg Up Could Shatter Expectations

2025-08-13 14:40:42, by Arslan Butt

Best Crypto to Buy Now in August 2025 – Top Crypto to Invest In

2025-08-12 18:10:52, by Alan Draper

Best Upcoming Crypto Coins in 2025

2025-08-14 13:30:55, by Ines S. Tavares

13 Best Crypto Presales to Invest In 2025 – Presale Crypto List

2025-08-13 09:00:51, by Alan Draper

16 New & Upcoming Coinbase Listings in August 2025

2025-08-12 04:18:26, by Ilija Rankovic

16 New & Upcoming Binance Listings in 2025

2025-08-12 18:55:38, by Ilija Rankovic

What Is the Next Crypto to Explode in 2025?

2025-08-13 10:09:41, by Ilija Rankovic

Bitcoin (BTC) Price Prediction 2025 – 2030

2025-08-14 07:30:00, by Leon Waters

Ripple (XRP) Price Prediction 2025, 2026 – 2030

2025-07-05 04:55:17, by Eric Huffman

Ethereum Price Prediction 2025–2030: Will ETH Bounce Back?

2025-04-02 12:04:31, by Ben Beddow

PERP2.66%
GMX1.96%
ARB2.54%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)