- GMX has reportedly been exploited for over $42 million in crypto assets
- The attacker is moving funds from Arbitrum to Ethereum to obscure the trail
- No official statement yet from GMX; user impact and platform response remain unclear
The decentralized exchange GMX has just been hit with what appears to be a serious exploit, with approximately $42 million siphoned from its vaults.
According to on-chain data tracked via DeBank and confirmed by PeckShield, the attacker drained the funds from GMX Vault-related contracts on Arbitrum and began moving them toward Ethereum mainnet—one of the most common laundering tactics we’ve seen in the past.
.@GMX_IO has been exploited for ~$42M. The exploiter has bridged ~$9.6M worth of cryptos to #Ethereum. pic.twitter.com/SKTC1ubVEI
— PeckShield Inc. (@peckshield) July 9, 2025
For those of you who’ve been watching closely, this one hurts. GMX had carved out a reputation for resilience and innovation on Arbitrum, offering leveraged trading with low fees and no slippage. That confidence took a hit today.
At the heart of the incident lies a wallet address—0xdf33...5221
—which received the stolen assets and then initiated cross-chain bridges. PeckShield confirmed that at least $9.6 million has already been successfully bridged to Ethereum.
If you’re wondering, yes—this is the part where the trail usually gets cold unless law enforcement steps in fast or the attacker makes a mistake.
GMX(@GMX_IO) was hacked for $42M.
— Lookonchain (@lookonchain) July 9, 2025
Currently, the hacker has bridged $9.65M to #Ethereum and exchanged them into $DAI and $ETH.https://t.co/mnWxs3za6e pic.twitter.com/ursqBA71dZ
This reminds me of past exploits where attackers methodically spread stolen assets across networks to avoid detection. Bridges, in these cases, don’t just connect ecosystems—they’re used like getaways in a digital heist.
So what’s next? For now, there’s no official statement from GMX’s team regarding the exploit, remediation plan, or whether affected users will be compensated. And until we hear something concrete, all eyes are on the exploiter’s wallet and GMX’s next move.
As always, it’s worth remembering that while DeFi offers radical transparency, that same openness is what lets everyone—including attackers—peek under the hood. Exploits like this don’t just impact funds, they chip away at trust.
And even though we’re trying to make sense of the chaos, we don’t know anything for sure. These are scenarios based on data we have now. The price could react, the network could respond, or it could all move in a direction no one expects.