SlowMist Cosine: GMX-related fork projects need to avoid similar security risks as GMX v1
07-10 12:55

Odaily News Yu Xian, the founder of SlowMist, posted on the X platform that GMX-related fork projects need to pay attention to similar security risks. He said that the fundamental reason why GMX was stolen for $42 million last night was that GMX v1 would immediately update the global short average price (globalShortAveragePrices) when processing short positions, and this global average price would directly affect the calculation of the total asset size (AUM), which would lead to the manipulation of the GLP token price. The attacker took advantage of this design flaw and enabled the timelock.enableLeverage feature (a necessary condition for creating large short orders) when executing orders through Keeper. By re-entering, he successfully created a large short position to manipulate the global average price, so as to artificially raise the GLP price in a single transaction and profit through redemption operations.

最热快讯
资讯热榜
日榜
周榜
Caixin: Sources say JD.com and Ant may not appear on the first batch of Hong Kong stablecoin licenses
Michael Saylor: Bitcoin is a trading asset in the short term and a treasury asset in the long term
Tom Lee: ETH's fair price could reach $10,000-20,000 in the next 12 months, and Wall Street will explore staking
Metaplanet CEO: We will explore various tools to raise funds to buy Bitcoin
The top 75 HYPE holders deposited 4.07 million USDC into Hyperliquid, all of which have been used to purchase HYPE.
Satoshi Gallery, the project maker of the Satoshi Nakamoto statue, is offering a 0.1 BTC reward for finding the lost statue.