Refreshed 5h ago· updates every 6h
GMX (2025) — Crypto Hack
Partially RecoveredJul 15, 2025·
ArbitrumAvalanche
Amount Stolen
$42.0M
Stablecoins and wrapped BTC/ETH
Recovered
$40.5M
96% of stolen funds
An exploiter used re-entrancy bugs in GMX's codebase to steal ~$42M, then returned >90% (~$40.5M) after a 10% whitehat bounty offer.
Summary
An exploiter used re-entrancy bugs in GMX's codebase to steal ~$42M, then returned >90% (~$40.5M) after a 10% whitehat bounty offer.
How It Was Compromised — Re-entrancy Attack via Re-entrancy bugs in a version of GMX's codebase
Re-entrancy AttackRe-entrancy bugs in a version of GMX's codebase
In July 2025, an exploiter used re-entrancy bugs in a version of GMX's codebase to steal approximately $42M in stablecoins and wrapped BTC/ETH. GMX offered a 10% whitehat bounty, after which the exploiter returned more than 90% of the funds (~$40.5M).
Fund Flow & Laundering Analysis
No laundering activity observed. Exploiter voluntarily returned >90% of funds after whitehat bounty offer.
Related Incidents
Kyber Network / KyberSwap
Kyber Network / KyberSwap (2023) — DeFi on Ethereum, Arbitrum, Optimism, Polygon, Avalanche, BSC
$49.0M
2023·Laundered
Balancer V2
Balancer V2 (2025) — Overflow/Rounding Vulnerability on Ethereum, Arbitrum, Base, Optimism, Polygon
$121.1M
2025·Partially Recovered
Kelp DAO
Kelp DAO (2026) — Bridge Exploit on Ethereum, Arbitrum
$292.0M
2026·Partially Recovered
KelpDAO
KelpDAO (2026) — Bridge Exploit on Ethereum, Arbitrum
$292.0M
2026·Partially Recovered
Radiant Capital
Radiant Capital (2024) — DeFi on Arbitrum, BSC
$58.0M
2024·Laundered
Hedgey Finance
Hedgey Finance (2024) — DeFi on Ethereum, Arbitrum, Optimism, Polygon, BSC
$44.7M
2024·Laundered