GMX’s Arbitrum Liquidity Pool Exploited for $42 Million in Brazen DeFi Hack

GMX's V1 GLP pool on Arbitrum was drained of over $40 million in a single transaction on July 9, exposing critical vulnerabilities in audited smart contracts. The attacker manipulated the protocol's leverage mechanism to mint excessive GLP tokens without proper collateral, forcing GMX to freeze trading and GLP minting/redemption on both Arbitrum and Avalanche.

While the breach was contained to V1, leaving GMX V2 and associated markets unaffected, the incident raises existential questions about decentralized leverage markets. GMX's dominance in perpetual trading now faces scrutiny as traders demand answers about audit failures and systemic risks.

Blockchain analysts reveal the exploit's alarming simplicity—bypassing collateral checks through protocol manipulation. This breach underscores the paradox of DeFi: even battle-tested systems remain vulnerable to ingenious attacks during daylight hours.