Odaily News Slow Fog founder Yu Xian stated on the X platform that GMX related fork projects need to pay attention to similar security risks. He mentioned that the fundamental reason for the theft of 42 million USD from GMX last night was that GMX v1 immediately updates the global short average price (globalShortAveragePrices) when processing short positions, and this global average price directly affects the calculation of total assets under management (AUM), which in turn leads to manipulation of GLP token prices. The attacker exploited this design flaw by using the Keeper, which activates the feature timelock.enableLeverage (a necessary condition for creating large short orders) when executing orders, successfully creating large short positions through reentrancy to manipulate the global average price, artificially raising the GLP price in a single transaction and profiting through redemption operations.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Slow Mist Cosine: GMX-related fork projects need to avoid security risks similar to GMX v1.
Odaily News Slow Fog founder Yu Xian stated on the X platform that GMX related fork projects need to pay attention to similar security risks. He mentioned that the fundamental reason for the theft of 42 million USD from GMX last night was that GMX v1 immediately updates the global short average price (globalShortAveragePrices) when processing short positions, and this global average price directly affects the calculation of total assets under management (AUM), which in turn leads to manipulation of GLP token prices. The attacker exploited this design flaw by using the Keeper, which activates the feature timelock.enableLeverage (a necessary condition for creating large short orders) when executing orders, successfully creating large short positions through reentrancy to manipulate the global average price, artificially raising the GLP price in a single transaction and profiting through redemption operations.