Skip to content

SYSTEM ONLINE

LIVE TAPE
BTC$84,409.00▲ 0.2%·
ETH$2,686.05▼ 0.2%·
USDT$0.999777▼ 0.0%·
BNB$778.05▲ 0.8%·
XRP$1.52▼ 0.4%·
USDC$0.999841▼ 0.0%·
SOL$121.78▲ 0.7%·
TRX$0.33329▼ 0.2%·
ZEC$1,578.25▼ 3.9%·
FIGR_HELOC$1.06▼ 0.4%·
HYPE$91.40▼ 1.0%·
DOGE$0.096699▲ 0.4%·
LINK$13.97▼ 0.9%·
XMR$550.39▼ 1.4%·
WBT$84.18▲ 0.1%·
USDS$0.999682▼ 0.0%·
ADA$0.254687▲ 0.9%·
RAIN$0.012697▼ 1.4%·
BTC$84,409.00▲ 0.2%·
ETH$2,686.05▼ 0.2%·
USDT$0.999777▼ 0.0%·
BNB$778.05▲ 0.8%·
XRP$1.52▼ 0.4%·
USDC$0.999841▼ 0.0%·
SOL$121.78▲ 0.7%·
TRX$0.33329▼ 0.2%·
ZEC$1,578.25▼ 3.9%·
FIGR_HELOC$1.06▼ 0.4%·
HYPE$91.40▼ 1.0%·
DOGE$0.096699▲ 0.4%·
LINK$13.97▼ 0.9%·
XMR$550.39▼ 1.4%·
WBT$84.18▲ 0.1%·
USDS$0.999682▼ 0.0%·
ADA$0.254687▲ 0.9%·
RAIN$0.012697▼ 1.4%·

Perpetuals DEX

GMX

2021gmx.io ↗GMX market data →

Also known as GMX V2, GMX Synthetics, GLP, GLV, GM pools, gmx.io, Gambit

gmx crypto

GMX is a decentralized exchange for leveraged perpetuals and swaps where traders trade against liquidity pools (GM and GLV) at Chainlink oracle prices instead of an order book. It runs on Arbitrum, Avalanche and MegaETH with up to 100x leverage, and its GMX token earns a share of fees through buybacks. The older V1 system was shut down after a $42M exploit in July 2025.

Our read

GMX suits traders who want size filled at an oracle price with fees they can see up front, and liquidity providers who understand they are the counterparty to every trader. The thing to watch is the code path nobody re-audited: the 2025 V1 drain came through a fix written in 2022 that never went through review. V2 is a separate, heavily audited codebase, but the lesson about patch discipline applies to it too.

01

Key facts

Chains
Arbitrum, Avalanche and MegaETH; GMX Account lets you trade from Ethereum, Base and BNB Chain
Sep 2026 · GMX ↗
Maximum leverage
Up to 100x on crypto markets; 10x on SPCX, 25–100x on commodities by session
Sep 2026 · GMX Docs ↗
Position fee
0.04% if the trade reduces the long/short imbalance, 0.06% if it widens it
Sep 2026 · GMX Docs ↗
Fee split
63% to GM/GLV liquidity providers; 27% buys back GMX for stakers
Sep 2026 · GMX Docs ↗
V1 exploit
About $42M of the ~$46M in Arbitrum GLP taken on 9 July 2025; funds returned minus a bounty
Aug 2025 · GMX Governance Forum ↗
First contracts published
gmx-contracts repository created September 2021
Sep 2021 · GitHub ↗
02

What GMX is and how its pools work

GMX began in 2021 on Arbitrum as the successor to Gambit, a BNB Chain exchange by the same pseudonymous team. Its first design, now called V1, put every asset into one shared basket, GLP, which took the other side of all trades. V2 ("Synthetics") split that into isolated GM pools, one per market, and GLV vaults that route liquidity across several GM pools of the same backing asset.

There is no order book. You submit an order, a keeper executes it at the Chainlink Data Streams price, and the pool is your counterparty. Liquidity providers earn 63% of fees but also pay out when traders win, which is the part newcomers miss: an LP in GMX is short trader skill.

PieceWhat it is
GM poolIsolated liquidity for one market, e.g. ETH/USD backed by WETH and USDC
GLVVault that spreads deposits across GM pools and rebalances
GLP (V1)Old multi-asset pool, phased out since July 2025
GMX tokenStaked for a share of fees via buybacks; governance
GMX AccountTrade from other chains without bridging first

Markets now include commodities, index products such as SPY and QQQ, and a SpaceX perp, each with its own session-based leverage and fee settings.

03

The GMX hack of July 2025: what happened to V1

On 9 July 2025 an attacker used a reentrancy flaw in V1's `executeDecreaseOrder` path. Re-entering the contract let them open shorts without updating the global average short price, which inflated GLP's calculated value; they then redeemed GLP at that inflated price and withdrew about $42M of the ~$46M in Arbitrum GLP. The vulnerable code had been introduced in 2022 as a fix for another bug and was never audited.

GMX offered a 10% white-hat bounty on-chain within about an hour. The attacker returned roughly 9,000 ETH and 10.5M FRAX within 48 hours and kept about $5M. V2, its pools and the GMX token were not affected.

DateStep
9 Jul 2025Exploit; GLP minting and redemption halted; V1 trading paused on Arbitrum and Avalanche
11 Jul 2025Bulk of funds returned to the GMX Security Committee multisig
4 Aug 2025DAO picks the distribution plan: GLV tokens plus a $2M treasury top-up and $500K of incentives
AfterGLP holders claim GLV; V1 is sunset rather than restarted

Under the plan, a holder of $10,000 of GLP would claim about $9,150 of GLV, split between the ETH and BTC vaults, and withdraw the remaining ~$850 from GLP. Claiming required signing a release of further claims against the DAO. Protocols that wrapped GLP, such as Beefy, handled their own users separately.

This was the second time GLP paid for a pricing weakness. In September 2022 a trader manipulated AVAX on V1 using stale-price arbitrage and took about $565K from the pool.

04

GMX trading fees, borrowing and price impact

Opening or closing a position costs 0.04% if your trade shrinks the gap between long and short open interest and 0.06% if it widens it. Commodities and index markets have their own schedules, cheaper during market hours (GMX docs).

  • Price impact: charged or rebated depending on how your trade moves pool balance. The single-token BTC and ETH pools have it set to zero.
  • Borrowing fee: paid every hour a position is open; on anything held for days this outweighs the entry fee.
  • Funding: paid from the larger side to the smaller side.
  • Swaps: 0.05% or 0.07%; stablecoin pairs from 0.005%.
  • Network/execution fee: a small amount of the chain's gas token for the keeper.

The old promise of "zero price impact" belonged to V1. On V2 most markets charge price impact, so large orders do pay for size, just through a published formula rather than a book.

05

GMX V2 max leverage on ETH and other markets

Crypto markets on GMX V2, ETH included, go up to 100x. Other markets are capped lower and some change with trading sessions:

MarketMarket hoursOff hours
Gold, silver, WTI, Brent100x25x
SPY, QQQ50x25x
SPCX (SpaceX)10x10x

At 100x a 1% adverse move plus fees wipes the collateral, and on commodity markets the liquidation threshold tightens automatically when the session closes, so a position that was safe on Friday afternoon can be closer to liquidation that evening.

06

Incident log

2 entries · $42.6M lost in total · repaid, confirmed: 0 of 2 where user funds were at stake

  1. Exploit$42.0M

    GMX V1 reentrancy exploit drains Arbitrum GLP

    A reentrancy bug in V1's order execution let an attacker inflate GLP's value and redeem about $42M of the ~$46M in Arbitrum GLP. The attacker returned most of it for a bounty of roughly $5M. V1 was shut down.

    Repaid — company's word onlyRecovered funds plus a $2M DAO top-up were distributed to GLP holders as claimable GLV under a plan the DAO says restores roughly full value. Claims run through a GMX contract; we did not find an independent tally of how much has been paid out.

    GMX Governance Forum ↗CoinDesk ↗Halborn ↗

  2. Exploit$565K

    AVAX price manipulation on GMX V1 (Avalanche)

    A trader pushed the AVAX price on outside venues and used V1's zero-price-impact oracle pricing to profit, taking about $565K from GLP liquidity providers.

    Not repaidThe loss was absorbed by GLP holders; we found no reimbursement.

    DefiLlama ↗

07

In our ratings

This page is the record. The scores sit on the review cards, next to the evidence and the weights they came from.

08

Compare GMX with

Frequently asked questions

Is GMX V2 affected by the V1 hack?+

No. The exploit was in V1 contracts only; GMX says V2, its pools and the GMX token were never affected. V1 trading has been disabled since July 2025.

What happened to GLP?+

GLP was retired after the July 2025 exploit. Holders were compensated in GLV tokens and can withdraw residual value from GLP.

Which chains is GMX on?+

Arbitrum, Avalanche and MegaETH, with GMX Account letting users fund trades from Ethereum, Base and BNB Chain.

Who is behind GMX?+

A pseudonymous team that previously built Gambit on BNB Chain. The protocol is governed by GMX stakers through a DAO and a security committee multisig.

Is GMX related to the GMX email service?+

No. GMX Mail is an unrelated German webmail provider that happens to share the name.

10

What changed

  1. Profile published.

Compiled by

Olivia Bennett

By Olivia Bennett

Blockchain Security Researcher · September 27, 2026

We have no commercial relationship with GMX and earn nothing from any link on this page. Every fact above carries the date it was true and a link to where it comes from; if one is out of date, the contact page reaches the editor who keeps this file.