GMX Phishing Hack

Reported loss $4.0M
Phishing

What happened

On January 3, 2023, an anonymous DeFi user lost GMX tokens then valued at about $3.4 million in a phishing incident. GMX community representatives said the incident did not involve a security issue in the GMX platform.

How it happened

  1. A malicious actor induced the user to approve a malicious transaction.
  2. The actor transferred GMX from the user's wallet to another address.
  3. The tokens were swapped for ether and the funds were bridged to Ethereum mainnet.

Protocol details

Classification Other
Protocol Type Exploit/Phishing

Evidence

Understand the attack patterns

Compare incidents →
Phishing Attacks

Same attack technique

Browse all hacks →
ERC20 Permit Loss not disclosed Azuki $750K lost BitKeep $8.0M lost Gemini Loss not disclosed

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes