SlowMist: The core reason for the GMX attack is that the global short average price of GMX v1 can be manipulated, causing the GLP price to be maliciously inflated for arbitrage.

By: theblockbeats.news|2025/07/10 01:21:53

BlockBeats News, July 10th, Slowmist CISO @im23pds tweeted that "The root cause of the GMX attack is that GMX v1 immediately updates the global short position average price when handling short positions. This global average price directly affects the calculation of the total asset under management (AUM), leading to the manipulation of the GLP token price.

The attacker exploited this design flaw by using a Keeper to enable the timelock.enableLeverage feature when executing orders (a necessary condition to create a large short position). Through reentrancy, they successfully created a large short position to manipulate the global average price, artificially raising the GLP price in a single transaction and profiting through redemption.

-- Price

This meeting focused on the global trends in digital financial transformation, the construction of regulatory frameworks for virtual assets, and the strategic layout of the TRON ecosystem in Central Asia, marking a substantial phase in the cooperation between TRON and Kyrgyzstan in the fields of blo...

46 minutes, $292 million stolen, DeFi faces development dilemma again

"Let's withdraw from DeFi first, it's too dangerous. This time the damage is much greater than Drift/Cowswap..." said well-known DeFi investor Dovey Wang.

How to Earn Free USDT in 2026: No High Volume Required (WEEX Poker Party Guide)

Is Joker Crypto legit in 2026 or just another memecoin? Can You Really Earn Passive Income with Joker Crypto in 2026? Learn how Joker staking rewards work, how to earn NFT bonuses, expected APY ranges, gas-fee rebates, and how to avoid crypto scams before joining.

How to Get Free USDT Welcome Bonus in 2026: Earn Up to 700 USDT on WEEX

Legit Free Welcome Bonus 2026: Learn how to earn up to 700 USDT on WEEX with Auto Earn Boost Fest. Increase your balance, activate Auto Earn, and qualify automatically.

AI Agent Payments Just Got Real: Utexo × x402 Brings 50ms USDT Transactions to Internet Scale

Utexo integrates USDT into the x402 protocol, enabling 50ms instant payments embedded natively in HTTP requests. Explore how this breakthrough is rewriting the rules for AI agent payments, API monetization, and the machine-to-machine economy.

DWF Deep Report: AI in DeFi Outperforms Humans in Yield Optimization, but Complex Trades Still Lag Behind by 5 Times

Among agents, model selection and risk management have the greatest impact on trading performance.

What Separates Smart Money from the Crowd in Crypto? Insights from Freedom of Money

Most crypto traders lose money not because of bad luck, but because they misunderstand how the market really works. From Freedom of Money to the rise and fall of Sam Bankman-Fried, they highlight a key divide in crypto: those who build the market and those who chase it. This reading guide explores essential books that reveal how narrative, regulation, capital, and psychology shape long-term success in the crypto industry.

The Risk Management Core Team has just been ousted, and Aave is now facing a $200 million default.

rsETH attack is just the tip of the iceberg, Aave is an approved insolvency

The $293 million bug wasn't in the code; so, what's the deal with the "DVN Configuration Bug," which led to the largest hack of 2026?

「Audit Passed」 these four words do not cover the location of the parameter.

a16z on Recruitment: How to Choose Between Crypto-Native and Traditional Talent?

Is it someone with encryption experience or someone with outstanding quick learning ability?

The biggest DeFi heist of 2026, hackers easily took advantage of Aave

A fake news story swindled 292 million dollars: Kelp DAO's cross-chain bridge was drained in 46 minutes.

Will Robots Replace Humans? He Says No!

Robots will not replace humans, but will rewrite the division of labor

Binance Coin's Price Skyrockets 15x to All-Time High, Saved by Three Bull Market Lifelines

Bringing Back the Long-Awaited Meme Coin Volatility

The organization has accessed the prediction market, but is stuck at the third stage

The proportion of sports categories on Kalshi is at a historical low, shifting from "entertainment trading" to "information and risk tools."

Head of crypto VC collective shrinks: a16z crypto fund management scale plummets by 40%, Multicoin cut in half

The only one experiencing counter-cyclical growth is Haun Ventures, which hit the jackpot in the stablecoin sector with BVNK being acquired by Mastercard.

The President of Kyrgyzstan meets with Sun Yuchen, and TRON collaborates with Kyrgyzstan to build a new pattern of digital economy in Central Asia