DeFi Exploit: GMX - Rekt
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-04-27
- Last updated: 2026-04-27
DeFi Exploit: GMX - Rekt Date: 7/9/2025 Loss: $42,000,000 USD Tags: GMX, Rekt, Arbitrum Summary: $42 million appeared to vanish from GMX V1 on July 9 via cross-contract reentrancy exploit introduced by a 2022 bug fix. Attacker manipulated globalShortAveragePrices to inflate GLP pricing, but funds were later recovered in coordinated disclosure - $5M bounty paid. Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/gmx-rekt Source: https://de.fi/rekt-database
Other addresses in this report: 0x321f653eed006ad1c29d174e17d96351bde22649, 0xdf3340a436c27655ba62f8281565c9925c3a5221, 0x489ee077994b6658eafa855c308275ead8097c4a