Decentralized exchange GMX is reportedly the victim of a major exploit, with over $42 million in digital assets drained from its vaults, according to data from DeBank. The incident involves a suspicious outflow of funds, with the stolen assets being transferred to a single wallet address. The funds are now being bridged from Arbitrum, a Layer 2 Ethereum scaling network, back to the Ethereum mainnet in an attempt to obfuscate and launder the stolen assets.
Blockchain security firm PeckShield has reported that the attacker has already bridged around $9.6 million worth of crypto assets from Arbitrum to the Ethereum network. This suggests that the attacker is trying to move the stolen funds across chains to avoid detection.
The nature of the incident is still under investigation, but on-chain data indicates that it was likely a targeted exploit or smart contract vulnerability. The GMX team has not yet released an official statement confirming the breach or outlining any steps being taken in response.
Community members and independent security researchers are closely monitoring the wallet activity of the address involved in the exploit, hoping for further clarity and potential mitigation. The GMX token saw a sharp drop in price following the reports, reflecting market uncertainty around the exploit.
The GMX team has issued a security update acknowledging the exploit and stating that approximately $40 million in tokens has been transferred from the GLP pool to an unknown wallet. The team emphasizes that security has always been a core priority for GMX, with the smart contracts undergoing numerous audits from top security firms.
This incident is one of the larger DeFi-related exploits of the year and highlights ongoing concerns about the security of cross-chain protocols and smart contract platforms. More updates are expected as the GMX team continues to investigate and releases an official statement.