Share this article
Decentralized Exchange GMX Exploited for $42M, Offers Hacker 10% White Hat Bounty
A portion of the stolen funds has already been bridged from Arbitrum to Ethereum.
Jul 9, 2025, 2:54 p.m.
What to know:
- Decentralized exchange GMX was exploited for over $42M, with $9.6M already bridged to Ethereum.
- Stolen assets include $10M in Frax dollar, $9.6M in wrapped BTC, and $5M in DAI, while $32M remains on Arbitrum.
- GMX offered the hacker a 10% white-hat bounty as crypto hacks hit $2.5B in losses in the first half, per CertiK.
Decentralized perpetual exchange GMX has been exploited with over $42 million worth of crypto being stolen, according to blockchain security firm PeckShield.
So far, $9.6 million worth of the funds have been bridged over to the Ethereum blockchain, which has become a natural path for hackers who then launder funds through token mixing protocol Tornado Cash.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
The rest of the $32 million remains on Abritrum, a layer-2 network that hosts the GMX exchange.
More than $10 million worth of legacy frax dollar was stolen as well as $9.6 million of wrapped btc (wBTC) and $5 million of the dai stablecoin.
GMX developers responded to the hacker, signing a message on-chain that read: "We want to offer a 10% white-hat bounty for the return of the exploited funds."
A white-hat bounty is offered to ethical hackers who find vulnerabilities in protocols and in return receive a bounty.
The exploit is another blight on a cryptocurrency industry that saw investors lose $2.5 billion to hacks and scams in the first half of 2025, according to a CertiK report.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
French Banking Giant BPCE to Roll Out Crypto Trading for 2M Retail Clients
The service will allow customers to buy and sell BTC, ETH, SOL, and USDC through a separate digital asset account managed by Hexarq.
What to know:
- French banking group BPCE will start offering crypto trading services to 2 million retail customers through its Banque Populaire and Caisse d’Épargne apps, with plans to expand to 12 million customers by 2026.
- The service will allow customers to buy and sell BTC, ETH, SOL, and USDC through a separate digital asset account managed by Hexarq, with a €2.99 monthly fee and 1.5% transaction commission.
- The move follows similar initiatives by other European banks, such as BBVA, Santander, and Raiffeisen Bank, which have already started offering crypto trading services to their customers.
Top Stories
