
Perpetuals DEX
GMX
Also known as GMX V2, GMX Synthetics, GLP, GLV, GM pools, gmx.io, Gambit
gmx crypto
GMX is a decentralized exchange for leveraged perpetuals and swaps where traders trade against liquidity pools (GM and GLV) at Chainlink oracle prices instead of an order book. It runs on Arbitrum, Avalanche and MegaETH with up to 100x leverage, and its GMX token earns a share of fees through buybacks. The older V1 system was shut down after a $42M exploit in July 2025.
Our read
GMX suits traders who want size filled at an oracle price with fees they can see up front, and liquidity providers who understand they are the counterparty to every trader. The thing to watch is the code path nobody re-audited: the 2025 V1 drain came through a fix written in 2022 that never went through review. V2 is a separate, heavily audited codebase, but the lesson about patch discipline applies to it too.
Key facts
- Chains
- Arbitrum, Avalanche and MegaETH; GMX Account lets you trade from Ethereum, Base and BNB Chain
- Sep 2026 · GMX ↗
- Maximum leverage
- Up to 100x on crypto markets; 10x on SPCX, 25–100x on commodities by session
- Sep 2026 · GMX Docs ↗
- Position fee
- 0.04% if the trade reduces the long/short imbalance, 0.06% if it widens it
- Sep 2026 · GMX Docs ↗
- V1 exploit
- About $42M of the ~$46M in Arbitrum GLP taken on 9 July 2025; funds returned minus a bounty
- Aug 2025 · GMX Governance Forum ↗
What GMX is and how its pools work
GMX began in 2021 on Arbitrum as the successor to Gambit, a BNB Chain exchange by the same pseudonymous team. Its first design, now called V1, put every asset into one shared basket, GLP, which took the other side of all trades. V2 ("Synthetics") split that into isolated GM pools, one per market, and GLV vaults that route liquidity across several GM pools of the same backing asset.
There is no order book. You submit an order, a keeper executes it at the Chainlink Data Streams price, and the pool is your counterparty. Liquidity providers earn 63% of fees but also pay out when traders win, which is the part newcomers miss: an LP in GMX is short trader skill.
| Piece | What it is |
|---|---|
| GM pool | Isolated liquidity for one market, e.g. ETH/USD backed by WETH and USDC |
| GLV | Vault that spreads deposits across GM pools and rebalances |
| GLP (V1) | Old multi-asset pool, phased out since July 2025 |
| GMX token | Staked for a share of fees via buybacks; governance |
| GMX Account | Trade from other chains without bridging first |
Markets now include commodities, index products such as SPY and QQQ, and a SpaceX perp, each with its own session-based leverage and fee settings.
The GMX hack of July 2025: what happened to V1
On 9 July 2025 an attacker used a reentrancy flaw in V1's `executeDecreaseOrder` path. Re-entering the contract let them open shorts without updating the global average short price, which inflated GLP's calculated value; they then redeemed GLP at that inflated price and withdrew about $42M of the ~$46M in Arbitrum GLP. The vulnerable code had been introduced in 2022 as a fix for another bug and was never audited.
GMX offered a 10% white-hat bounty on-chain within about an hour. The attacker returned roughly 9,000 ETH and 10.5M FRAX within 48 hours and kept about $5M. V2, its pools and the GMX token were not affected.
| Date | Step |
|---|---|
| 9 Jul 2025 | Exploit; GLP minting and redemption halted; V1 trading paused on Arbitrum and Avalanche |
| 11 Jul 2025 | Bulk of funds returned to the GMX Security Committee multisig |
| 4 Aug 2025 | DAO picks the distribution plan: GLV tokens plus a $2M treasury top-up and $500K of incentives |
| After | GLP holders claim GLV; V1 is sunset rather than restarted |
Under the plan, a holder of $10,000 of GLP would claim about $9,150 of GLV, split between the ETH and BTC vaults, and withdraw the remaining ~$850 from GLP. Claiming required signing a release of further claims against the DAO. Protocols that wrapped GLP, such as Beefy, handled their own users separately.
This was the second time GLP paid for a pricing weakness. In September 2022 a trader manipulated AVAX on V1 using stale-price arbitrage and took about $565K from the pool.
GMX trading fees, borrowing and price impact
Opening or closing a position costs 0.04% if your trade shrinks the gap between long and short open interest and 0.06% if it widens it. Commodities and index markets have their own schedules, cheaper during market hours (GMX docs).
- Price impact: charged or rebated depending on how your trade moves pool balance. The single-token BTC and ETH pools have it set to zero.
- Borrowing fee: paid every hour a position is open; on anything held for days this outweighs the entry fee.
- Funding: paid from the larger side to the smaller side.
- Swaps: 0.05% or 0.07%; stablecoin pairs from 0.005%.
- Network/execution fee: a small amount of the chain's gas token for the keeper.
The old promise of "zero price impact" belonged to V1. On V2 most markets charge price impact, so large orders do pay for size, just through a published formula rather than a book.
GMX V2 max leverage on ETH and other markets
Crypto markets on GMX V2, ETH included, go up to 100x. Other markets are capped lower and some change with trading sessions:
| Market | Market hours | Off hours |
|---|---|---|
| Gold, silver, WTI, Brent | 100x | 25x |
| SPY, QQQ | 50x | 25x |
| SPCX (SpaceX) | 10x | 10x |
At 100x a 1% adverse move plus fees wipes the collateral, and on commodity markets the liquidation threshold tightens automatically when the session closes, so a position that was safe on Friday afternoon can be closer to liquidation that evening.
Incident log
2 entries · $42.6M lost in total · repaid, confirmed: 0 of 2 where user funds were at stake
Exploit$42.0M
GMX V1 reentrancy exploit drains Arbitrum GLP
A reentrancy bug in V1's order execution let an attacker inflate GLP's value and redeem about $42M of the ~$46M in Arbitrum GLP. The attacker returned most of it for a bounty of roughly $5M. V1 was shut down.
Repaid — company's word onlyRecovered funds plus a $2M DAO top-up were distributed to GLP holders as claimable GLV under a plan the DAO says restores roughly full value. Claims run through a GMX contract; we did not find an independent tally of how much has been paid out.Exploit$565K
AVAX price manipulation on GMX V1 (Avalanche)
A trader pushed the AVAX price on outside venues and used V1's zero-price-impact oracle pricing to profit, taking about $565K from GLP liquidity providers.
Not repaidThe loss was absorbed by GLP holders; we found no reimbursement.
In our ratings
This page is the record. The scores sit on the review cards, next to the evidence and the weights they came from.
Compare GMX with
HyperliquidPerpetuals DEX · 2022Hyperliquid is a perpetuals exchange running on its own layer-1 chain, with a fully on-chain order book. It took no venture money and airdropped 31% of HYPE.
Gains NetworkPerpetuals DEXGains Network builds Gains (formerly gTrade), a synthetic leverage DEX: 500x crypto, 1000x forex, plus stocks and commodities, backed by per-collateral vaults.
dYdXPerpetuals DEX · 2017dYdX is a perpetuals DEX on its own Cosmos chain, running since 2017. In June 2026 its team launched Arcus on Robinhood Chain; v4 stays up for existing users.
Vertex ProtocolPerpetuals DEXVertex Protocol was a hybrid order-book DEX for spot, perps and lending. It shut in July 2025 when its team joined Kraken's Ink Foundation; VRTX was retired.
Frequently asked questions
Is GMX V2 affected by the V1 hack?+
No. The exploit was in V1 contracts only; GMX says V2, its pools and the GMX token were never affected. V1 trading has been disabled since July 2025.
What happened to GLP?+
GLP was retired after the July 2025 exploit. Holders were compensated in GLV tokens and can withdraw residual value from GLP.
Which chains is GMX on?+
Arbitrum, Avalanche and MegaETH, with GMX Account letting users fund trades from Ethereum, Base and BNB Chain.
Who is behind GMX?+
A pseudonymous team that previously built Gambit on BNB Chain. The protocol is governed by GMX stakers through a DAO and a security committee multisig.
Is GMX related to the GMX email service?+
No. GMX Mail is an unrelated German webmail provider that happens to share the name.
What changed
- Profile published.
Compiled by
Blockchain Security Researcher · September 27, 2026
We have no commercial relationship with GMX and earn nothing from any link on this page. Every fact above carries the date it was true and a link to where it comes from; if one is out of date, the contact page reaches the editor who keeps this file.