SlowMist: GMX Theft Leads to GLP Price Manipulation, Attacker Manipulates Global Average Price by Creating Large Short Positions through Reentrancy
BlockBeats News, July 10th. SlowMist Cosmos stated in a post that the fundamental reason for the $42 million theft of GMX last night was that GMX v1 would immediately update the global short average price when handling short positions. This global average price directly affects the calculation of the total asset under management (AUM), leading to the manipulation of the GLP token price.
The attacker exploited this design flaw by using a Keeper to enable the timelock.enableLeverage feature when executing orders (a necessary condition for creating large short positions), successfully creating a large short position through reentrancy to manipulate the global average price. This artificially inflated the GLP price in a single transaction and profited through redemption operations.
You may also like

ThunderChain Resumes Legal Battle as Former CEO Chen Lei Accused of Embezzlement for Cryptocurrency Speculation - What Happened Back Then?

$200K Annual Salary Hiring, Predicting Market Will See Wall Street Players

Eric Adams Denies “Rug Pull” Allegations Linked to NYC Token Despite Significant Losses
Key Takeaways: Eric Adams firmly denies allegations implying that money was moved out of the NYC Token. Market…

Bitchat Downloads Surge in Uganda as Government Implements Internet Shutdown Before Elections
Key Takeaways: Uganda’s government enforced an internet blackout ahead of elections, pushing citizens to download Bitchat, a decentralized…

BSC’s USD1 Pool Meme Coin ‘An’ Sees Significant Surge
Key Takeaways The BSC chain’s USD1 pool meme coin ‘An’ experienced a notable market cap surge, exceeding $47.92…

Price Alert Feature Is Now Live
Stay Informed of Key Market Movements with our new Price Alert feature!

Tether Freezes $182 Million in Assets in a Day: Is USDT Still a Neutral Coin?
Key Takeaways Tether recently froze $182 million in USDT across five wallets on the Tron blockchain, raising questions…

a16z Secures $15 Billion: Redefining Venture Capital Through Visionary Storytelling
Key Takeaways a16z Raises Capital: The firm has raised an astronomical $15 billion, marking a significant point in…

BitGo’s Revenue Surges with Upcoming IPO as Institutional Interest Grows
Key Takeaways BitGo, a major player in cryptocurrency custody, aims to raise $201 million through a U.S. IPO…

80% of Oil Revenue Settled in Stablecoins: Venezuela’s USDT Dominance
Key Takeaways Venezuela’s economy heavily relies on USDT, with 80% of oil revenue settled using this stablecoin, showcasing…

Primitive Ventures Founder Dovey Wan: Who Is Footing the Bill for This Crypto Bull Market Cycle?

Tether Freezes $182 Million in Assets in One Day, Is USDT Still a Neutral Coin?

Error Prevented Content Extraction: Causes and Solutions
Key Takeaways Excessive requests can result in blocked access to data sources. Ensuring adherence to API usage policies…

80% of oil income settled in stablecoins, Venezuela makes USDT its second currency
A Decade-Old Crypto Veteran, Zcash Is Facing a Midlife Crisis Too
In youth, restraint in the name of compliance; in midlife, wealth—and thoughts of divorce.

After Stepping Down as Mayor of New York City, He Pivoted to Selling Cryptocurrency

New Drag-to-Set TP/SL Candlestick Chart Feature on Web
Make risk management more intuitive and efficient! The WEEX web platform is introducing the "Drag-to-set TP/SL" feature.

Crypto Rich Threaten to Depart California Amid New Tax Proposal
Key Takeaways Proposed California tax imposes a 5% assets tax on residents with over $1 billion, sparking debate…
ThunderChain Resumes Legal Battle as Former CEO Chen Lei Accused of Embezzlement for Cryptocurrency Speculation - What Happened Back Then?
$200K Annual Salary Hiring, Predicting Market Will See Wall Street Players
Eric Adams Denies “Rug Pull” Allegations Linked to NYC Token Despite Significant Losses
Key Takeaways: Eric Adams firmly denies allegations implying that money was moved out of the NYC Token. Market…
Bitchat Downloads Surge in Uganda as Government Implements Internet Shutdown Before Elections
Key Takeaways: Uganda’s government enforced an internet blackout ahead of elections, pushing citizens to download Bitchat, a decentralized…
BSC’s USD1 Pool Meme Coin ‘An’ Sees Significant Surge
Key Takeaways The BSC chain’s USD1 pool meme coin ‘An’ experienced a notable market cap surge, exceeding $47.92…
Price Alert Feature Is Now Live
Stay Informed of Key Market Movements with our new Price Alert feature!