$42 M appeared to vanish from @GMX_IO V1 - July 9 via cross-contract reentrancy exploit introduced by a 2022 bug fix. Attacker manipulated globalShortAveragePrices to inflate GLP pricing, but funds were later recovered in coordinated disclosure - $5M bounty paid. Story below
2,88K