GMX Exchange Suffers $42 Million Exploit on Arbitrum

TLDR

• GMX lost approximately $42 million from its GLP liquidity pool.
• The hacker used complex swaps to obscure the money trail.
• GMX token price dropped 28% following the exploit.

GMX, a prominent decentralized derivatives exchange, recently suffered a major exploit. The incident occurred on July 9, 2025, resulting in an estimated $42 million loss from its GLP liquidity pool on the Arbitrum network.

The hacker converted the stolen assets, including USDC, ETH, DAI, FRAX, WBTC, and WETH, using complex swaps and cross-chain bridges. This method aimed to obscure the money trail, making the funds difficult to trace.

Security Firm Confirms Exploit Details

PeckShield, a well-known blockchain security firm, confirmed the exploit and traced the funds on-chain. The attacker funneled assets through various transactions, showing a high level of sophistication.

After the exploit, the hacker distributed the funds across four new wallets. They also bridged some assets to Ethereum to further disperse the money trail.

GMX’s Immediate Response and Action

In response, GMX suspended trading on GMX v1 and halted the minting and redeeming of GLP on both Arbitrum and Avalanche. These actions were taken to prevent additional risks and to protect users.

“Trading on GMX v1, and the minting and redeeming of GLP, have been disabled on both Arbitrum and Avalanche to prevent any further attack vectors and protect users from additional negative impacts,” stated GMX on X.

GMX

Attempted Negotiation with the Hacker

The GMX team has reached out to the hacker with an on-chain message. They offered a 10% white-hat bounty, roughly $4.2 million, in exchange for the return of 90% of the assets.

The team promised to refrain from legal prosecution if the hacker complies. They have given a 48-hour window for the return, urging the individual to reconsider their actions.

Market Reaction and Asset Impact

The GMX token price fell 28%, currently trading at $11.20. The exploit had an immediate effect on its market capitalization and liquidity. Prior to the hack, GMX was Arbitrum’s top DeFi protocol by total value locked, exceeding $500 million in user deposits.

Beyond financial implications, the assets ETH, WETH, WBTC, USDC, DAI, and FRAX were particularly impacted. The liquidity for major products within the ecosystem remains constrained following the incident.

Real-time updates on cryptocurrency incidents can be found on platforms like Cyvers and PeckShield. These sources track and provide alerts on market movements and exploits.

Blockchain Security Insights

Community and Institutional Response

The community is actively monitoring the situation, with a significant focus on tracking the stolen funds. GMX’s core team has yet to release a detailed post-mortem, creating anticipation among stakeholders.

No formal responses have been recorded from major regulatory agencies or institutional partners. The lack of immediate commentary may suggest awaiting further information from GMX’s ongoing investigations.

Insightful discussions on market trends and cryptocurrency analyses can be followed through platforms such as Token 6900 and AfroReporter, which provide comprehensive insights into the evolving crypto landscape.