GMX V1 Perps Hack

TOTAL LOST $565K
Low Price Oracle Attack / Stale Price Arbitrage arbitrum
Chain arbitrum Primary network
Recovered - No recovery reported
Loss Rank #1189 All-time
Protocol Type Derivatives Target category

What happened

GMX is a decentralized spot and perpetual exchange that supports low swap fees and zero price impact trades. Trading is supported by a unique multi-asset pool that earns liquidity providers fees from market making, swap fees, leverage trading (spreads, funding fees & liquidations) and asset rebalancing.

Case & protocol details

Classification Ecosystem / Market Manipulation
Protocol Type Derivatives
Smart Contract Language Solidity
Official Website gmx.io/
Protocol Twitter/X @GMX_IO

Audit assessment

Review priorities based on the documented failure pattern in GMX V1 Perps (September 2022).

Critical checks

  • Verify every sensitive logic path is guarded by appropriate access controls and input validation - see the Oracle Manipulation & Price Manipulation attack class for patterns
  • Audit oracle price feeds for manipulation risks - ensure time-weighted average prices (TWAPs) or multi-source aggregators are used, not spot prices

Evidence & learning

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.