GMX Exchange Exploited for $42M: Hacker Offered 10% White Hat Bounty After wBTC and Stablecoins Stolen

According to @PeckShieldAlert, the decentralized perpetual exchange GMX has been exploited for over $42 million in various cryptocurrencies. The blockchain security firm reported that the stolen assets include over $10 million in legacy Frax Dollar, $9.6 million in wrapped BTC (wBTC), and $5 million in DAI stablecoin. The report indicates that $9.6 million of the stolen funds have been bridged to the Ethereum blockchain, while $32 million remains on the Arbitrum network where GMX operates. In response, GMX developers have publicly offered the attacker a 10% white-hat bounty for the return of the funds via an on-chain message. This incident adds to the significant losses from crypto hacks, which a CertiK report stated amounted to $2.5 billion in the first half of 2025. For traders, this exploit on a major Arbitrum-based DEX could impact sentiment around DeFi security, the GMX token, and the broader Arbitrum ecosystem.
SourceAnalysis
The decentralized finance (DeFi) sector has been struck by another significant security breach, with the decentralized perpetual exchange GMX suffering an exploit resulting in the loss of over $42 million in crypto assets. The incident was first reported by the blockchain security firm PeckShield, which has been tracking the movement of the stolen funds. This event underscores the persistent and evolving risks traders face when engaging with DeFi protocols, even as the broader market shows signs of resilience. The immediate aftermath saw the GMX team attempt to mitigate the damage by offering the attacker a 10% white-hat bounty for the return of the funds, a common strategy in DeFi to incentivize recovery and identify protocol vulnerabilities.
GMX Exploit Details and Market Reaction
According to the on-chain analysis from PeckShield, the hacker has already begun moving the illicitly gained assets. Approximately $9.6 million has been bridged from Arbitrum, the layer-2 network where GMX operates, to the Ethereum mainnet. This is a well-worn path for exploiters, who often use the Ethereum network's deep liquidity and tools like the token mixing protocol Tornado Cash to launder funds and obscure their tracks. The majority of the stolen capital, around $32 million, currently remains on the Arbitrum network. The composition of the stolen funds is diverse, including over $10 million in legacy Frax (FRAX) stablecoins, $9.6 million in Wrapped Bitcoin (wBTC), and $5 million in Dai (DAI), highlighting the systemic risk across multiple core DeFi assets held within the protocol's liquidity pools.
Crypto Prices Rally Despite DeFi Hack
In a surprising turn of events for traders, the broader cryptocurrency market has largely shrugged off the negative news. Instead of a market-wide downturn often associated with major DeFi exploits, key assets have posted significant gains. Bitcoin (BTC) has surged, with the BTC/USDT pair climbing 2.23% to trade at $111,237.25. The asset printed a 24-hour high of $111,934.84, demonstrating strong bullish momentum that has overshadowed the GMX incident. Ethereum (ETH) has shown even more remarkable strength, with the ETH/USDT pair rocketing up 6.47% to reach $2,797.96. The strength in Ethereum is particularly noteworthy given the exploit occurred on Arbitrum, an Ethereum layer-2 scaling solution. The ETH/BTC trading pair reflects this outperformance, gaining 4.82% to hit 0.02519, suggesting traders are either confident in Ethereum's long-term security or are focused on other bullish catalysts.
This market reaction provides a crucial insight for traders: the market's maturity may be reaching a point where protocol-specific exploits are becoming increasingly isolated events rather than systemic contagion triggers. The rally in other altcoins supports this thesis. For example, the AVAX/BTC pair is up a staggering 6.73%, indicating a broad risk-on appetite across the altcoin market. Traders appear to be differentiating between the specific vulnerability in GMX's code and the fundamental health of the broader crypto ecosystem. However, this incident serves as a stark reminder of the importance of due diligence and risk management. As highlighted in a CertiK report, hacks and scams cost investors billions, with one report noting over $2.5 billion was lost in the first half of a recent year alone. While the market rallies, traders who held assets in the affected GMX pools are facing total losses, emphasizing the high-stakes nature of providing liquidity in DeFi.
PeckShieldAlert
@PeckShieldAlertPeckShield is a prominent blockchain security firm that provides comprehensive solutions aimed at safeguarding the blockchain ecosystem.