SlowMist Cosine: GMX-related fork projects need to avoid similar security risks as GMX v1

By: odaily.com|2025/07/10 13:01:40

Odaily News Yu Xian, the founder of SlowMist, posted on the X platform that GMX-related fork projects need to pay attention to similar security risks. He said that the fundamental reason why GMX was stolen for $42 million last night was that GMX v1 would immediately update the global short average price (globalShortAveragePrices) when processing short positions, and this global average price would directly affect the calculation of the total asset size (AUM), which would lead to the manipulation of the GLP token price. The attacker took advantage of this design flaw and enabled the timelock.enableLeverage feature (a necessary condition for creating large short orders) when executing orders through Keeper. By re-entering, he successfully created a large short position to manipulate the global average price, so as to artificially raise the GLP price in a single transaction and profit through redemption operations.

At WEEX, we recognize that the holiday season often brings a different trading experience for many users. As market participation slows, price behavior can feel less predictable and familiar trading rhythms may shift. For traders following AI news today or using AI trading tools, this period often highlights how market structure can influence model performance and short-term signals. Approaching these periods with clear expectations and a disciplined mindset can help traders better navigate seasonal market conditions.

Lido DAO’s Increased Development and Market Dynamics Elevate LDO Price

Key Takeaways Lido DAO’s development activities have surged by 690%, signifying substantial growth. The Lido DAO token (LDO)…

Hyperliquid Whales Shift Strategies: BTC Longs Decline, ETH Shorts Dominate

Key Takeaways A significant reduction in Bitcoin long positions has been observed on Hyperliquid, with large holders decreasing…

Token VS Equity: The Aave Controversy

This is the challenge Aave has to face, and more broadly, the challenge the entire industry has to face.

December 26th Market Key Intelligence, How Much Did You Miss?

1. On-chain Funds: $7.8M USD inflow to Hyperliquid today; $5.5M USD outflow from Solana 2. Largest Price Swings: $ISLM, $FTN 3. Top News: Trust Wallet will ensure all affected users receive refunds, users need to complete the upgrade process promptly

Crypto Christmas Heist: Over $6 Million Lost, Trust Wallet Chrome Extension Wallet Hacked Analysis

Trust Wallet Browser Extension version 2.68 has been found to contain a malicious backdoor, resulting in user funds being stolen, with a total loss exceeding $6 million.

Trust Wallet Browser Extension Security Incident Leads to Losses

Key Takeaways Trust Wallet identified a significant security breach in its browser extension version 2.68. Approximately over $6…

Bitcoin Surges Toward $90,000 as $27 Billion Crypto Options Expire

Key Takeaways Bitcoin’s price is nearing the $90,000 mark amid increased market activity following the holiday lull. The…

Bitcoin Options Set to Expire, Potentially Altering Price Beyond $87,000 Range

Key Takeaways A historic Bitcoin options expiry event, valued at $236 billion, is set to occur, potentially impacting…

Ethereum Price Prediction: Whales Accumulate as Market Awaits Key Break

Key Takeaways Ethereum’s price remains in a “no-trade zone” between $2,800 and $3,000 amid low market activity. Whale…

Matrixport Predicts Limited Downside for Bitcoin Amid Market Caution

Key Takeaways Matrixport’s report suggests Bitcoin’s downside risks are decreasing, with the market moving towards a phase where…

Bitcoin and Ethereum Options Expiry Shakes Market Stability

Key Takeaways The largest options expiry in cryptocurrency history is occurring today, involving over $27 billion in Bitcoin…

Trust Wallet Hack Results in $3.5 Million Loss for Major Wallet Holder

Key Takeaways A significant Trust Wallet hack led to the theft of $3.5 million from an inactive wallet.…

PancakeSwap Launches LP Rewards on Base Network

Key Takeaways PancakeSwap has introduced liquidity provider (LP) rewards for 12 v3 pools on the Base network, facilitated…

BDXN Wallets Deposit $400,000 in Tokens to Multiple Exchanges

Key Takeaways BDXN project wallets have transferred approximately $400,000 worth of tokens to various exchanges. The transfers involve…

Crypto Derivatives Volume Skyrockets to $86 trillion in 2025 as Binance Dominates

Key Takeaways Cryptocurrency derivatives volume has surged to an astronomical $86 trillion in 2025, equating to an average…

Ethereum in 2026: Glamsterdam and Hegota Forks, Layer 1 Scaling, and More

Key Takeaways Ethereum is poised for crucial developments in 2026, particularly with the Glamsterdam and Hegota forks. Glamsterdam…