GMX, a decentralized exchange, recovered $40 million in stolen crypto after an attacker exploited a re-entrancy vulnerability. The exploiter kept a $5 million bounty and sent funds through Tornado Cash, raising concerns about laundering.
- The attacker exploited GMX's GLP pool via a re-entrancy attack, manipulating token pricing to withdraw inflated amounts of crypto.
- GMX offered a 10% bounty for the return of funds, a growing trend in DeFi exploits to minimize losses.
- The attacker laundered $5 million through Tornado Cash, underscoring ongoing challenges in tracking illicit crypto flows.
📎 Related coverage from: decrypt.co
