$565,000 GMX exploit deep dive: How a savvy trader took advantage of a broker’s loophole


  • GMX suffered a $565,000 exploit in which holders of its liquidity token GLP suffered maximum pain for providing liquidity to savvy traders. 
  • The exploiter capitalized on price manipulation, engaging in several large trades against GLP holders because of fixed prices supplied by Chainlink-run oracles. 
  • Liquidity providers lose when traders profit; attackers exploited this vulnerability and drained GLP holders of their funds.

An exploiter deployed millions of dollars to manipulate the price of Avalanche (AVAX) on the decentralized exchange GMX. The exploit resulted in a loss of $565,000 for holders of the exchange's liquidity token GLP, by using a strategy that took advantage of a loophole on the liquidity pool platform. 

Also read: Luna Classic: Why crypto Twitter is pushing for 1000x gains

GMX suffered a $565K price manipulation ‘exploit’

GMX’s competitor’s founder said on September 2 that an exploit could be pulled off on the decentralized exchange, leaving GLP (liquidity provider token) holders short. Exactly 16 days later, on September 18, it happened. 

The exchange suffered a price manipulation exploit, and the attacker capitalized on GMX’s  “minimal spread” and “zero price impact” features to pull off the exploit. GLP token holders who provided liquidity in the form of Avalanche tokens to the GMX exchange suffered a loss of around $565,000 in the Avalanche AVAX/USD market.

Joshua Lim, the head of derivatives at Genesis Trading, is one of the first crypto proponents to analyze the exploit. Lim argues that offering liquidity to savvy traders is a necessary but painful part of the process. Holders of GMX’s liquidity provider token GLP lost their holdings to the exploit. 

The attacker opened large positions at zero slippage and successfully extracted profits from GMX’s AVAX/USD market. The chart presented the event as a sinusoidal pattern for over an hour as the trader orchestrating the attack switched from long to short five times. 

AVAX-USD

AVAX-USD 

The first cycle took place from 01:15 to 01:28 UTC, and the trader extracted roughly $158,000. The trader repeated it five times (with less impact each time) and extracted between $500,000 to $700,000 in profit. The net collection by the attacker was less than $700,000 since they paid spread to market-makers on other venues.  

Attack on the AVAX-USD pool

Attack on the AVAX-USD pool

Lim argues that GMX was designed in a manner to facilitate this exploit; by design, there was a loophole that the attacker exploited since Chainlink-run oracles do not factor in the impact on price of large market-moving orders. 

In contrast, on the FTX exchange, Lim explains, traders pay some slippage – the difference between the expected price of a trade and the price at which the trade is executed. This explains why the attacker chose GMX instead of FTX where perpetual contracts are available. 

Slippage comes into the picture when you buy in a large volume. When a trader purchases 200,000 units of AVAX-PERP on FTX, for example, the price would typically climb from $17.95 to $20.25. This implies a trader would suffer a loss on FTX exchange and the other avenues when moving the funds. 

GMX, however, does not reflect the true cost of liquidity; due to the Chainlink-run oracles, there is unlimited liquidity at a mid-market oracle price. 

GMX has not offered any compensation to affected GLP token holders. Traders who provide liquidity to savvy traders should be wary of similar possible exploits in the future. 


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.

If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.

FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.

The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.

Recommended content


Recommended Content

Editors’ Picks

Is Altcoin Season here as Bitcoin reaches a new all-time high?

Is Altcoin Season here as Bitcoin reaches a new all-time high?

Bitcoin reaches a new all-time high of $98,384 on Thursday, with altcoins following the suit. Reports highlight that the recent surge in altcoins was fueled by the victory of crypto-friendly candidate Donal Trump in the US presidential election.

More Altcoin News
Shanghai court confirms legal recognition of crypto ownership

Shanghai court confirms legal recognition of crypto ownership

A Shanghai court has confirmed that owning digital assets, including Bitcoin, is legal under Chinese law. Judge Sun Jie of the Shanghai Songjiang People’s Court shared this opinion through the WeChat account of the Shanghai High People’s Court.

More Cryptocurrencies News
BTC hits an all-time high above $97,850, inches away from the $100K mark

BTC hits an all-time high above $97,850, inches away from the $100K mark

Bitcoin hit a new all-time high of $97,852 on Thursday, and the technical outlook suggests a possible continuation of the rally to $100,000. BTC futures have surged past the $100,000 price mark on Deribit, and Lookonchain data shows whales are accumulating.

More Bitcoin News
Shiba Inu holders withdraw 1.67 trillion SHIB tokens from exchange

Shiba Inu holders withdraw 1.67 trillion SHIB tokens from exchange

Shiba Inu trades slightly higher, around $0.000024, on Thursday after declining more than 5% the previous week. SHIB’s on-chain metrics project a bullish outlook as holders accumulate recent dips, and dormant wallets are on the move, all pointing to a recovery in the cards.

More Shiba Inu News
Bitcoin: New high of $100K or correction to $78K?

Bitcoin: New high of $100K or correction to $78K?

Bitcoin surged to a new all-time high of $93,265 in the first half of the week, followed by a slight decline in the latter half. Reports highlight that Bitcoin’s current level is still not overvalued and could target levels above $100,000 in the coming weeks.

Read full analysis
Best Forex Brokers with Low Spreads

Best Forex Brokers with Low Spreads

VERIFIED Low spreads are crucial for reducing trading costs. Explore top Forex brokers offering competitive spreads and high leverage. Compare options for EUR/USD, GBP/USD, USD/JPY, and Gold.

Read More

BTC

ETH

XRP