SlowMist: GMX was attacked because the average short price of GMX v1 can be manipulated, and the price of GLP was maliciously raised for arbitrage

Odaily News SlowMist CISO @im23pds posted on the X platform: The root cause of the GMX attack is that GMX v1 will immediately update the global short break price when processing short positions, and this global break price will directly affect the calculation of the total asset size (AUM), which will lead to the manipulation of the GLP token price. The attacker took advantage of this design flaw and enabled the timelock.enableLeverage feature (a necessary condition for creating large short orders) when executing orders through Keeper. By re-entering, the attacker successfully created a large short position to manipulate the global average price, artificially raising the GLP price in a single transaction and profiting from redemption operations.

Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.