Best Decentralised Exchanges
Top rated: Uniswap 8.7
Swap venues where you never hand over your keys.
5rated →
You trade against liquidity pools at an oracle price rather than into an order book. V2 splits liquidity into isolated GM pools and charges price impact on most markets under a published formula. The old V1 was drained of about $42M on 9 Jul 2025 through an unreviewed 2022 fix and shut down; recovered funds were returned to GLP holders as claimable GLV.
Best for: Oracle-priced execution against pooled liquidity, with published fees
7.2 is the weighted average of the five pillar findings below. Dependable, with trade-offs a reader should know about first.
Non-custodial, and V2 is a separate, heavily audited codebase. On 9 Jul 2025 a reentrancy bug in V1, introduced by a 2022 fix that was never reviewed, let an attacker take about $42M of the ~$46M in Arbitrum GLP. Most was returned for a bounty and GLP holders were offered roughly full value as GLV; we found no independent tally of claims.
Position fee of 0.04% or 0.06% depending on whether the trade narrows or widens the long/short imbalance, plus price impact and borrowing fees. Borrowing on held positions is the real expense and is less prominent than the entry fee.
Unlicensed, with front-end geographic restrictions only.
Oracle pricing means no order book to walk, but V2 charges price impact on most markets, so size is paid for through a formula; only the single-token BTC and ETH pools have it set to zero. Execution depends on oracle integrity, which was exploited on V1 in 2022.
Clear interface and honest documentation about how the pool model transfers risk to liquidity providers.
Strengths
Against it
GMX prices trades against liquidity pools at an oracle price instead of an order book. V2 charges price impact on most markets under a published formula, so large orders do pay for size; only the single-token BTC and ETH pools have it set to zero. The old "zero price impact" promise belonged to V1.
V1 was drained of about $42M on 9 Jul 2025 through a reentrancy bug introduced by a 2022 fix that was never reviewed, and it was shut down. Most of the money came back for a bounty and GLP holders were offered roughly full value as GLV, which is why no fund-loss penalty applies. V2 is a separate, heavily audited codebase; the lesson about patch discipline applies to it too.
Not in the order-book sense, since trades fill at an oracle price. But V2 charges price impact on most markets depending on how your trade moves pool balance, so size still costs something. The single-token BTC and ETH pools have price impact set to zero.
A 0.04% or 0.06% position fee, price impact, and borrowing fees accrued while the position is open. For anything held more than briefly, borrowing exceeds the entry cost, and it is less prominent than the headline fee.
On 9 Jul 2025 an attacker used a reentrancy flaw to take about $42M of the ~$46M in Arbitrum GLP. Most was returned for a bounty of roughly $5M, V1 was shut down, and GLP holders could claim GLV under a plan the DAO says restores roughly full value.
Assessed by
Blockchain Security Researcher · September 27, 2026
CoinRadar Daily is a non-commercial project. We have no commercial relationship with GMX, earn nothing from any link on this page, and carry no advertising or sponsorship anywhere on the site. Findings rest on public sources; we did not open an account or transact.
Rubric v2.0How we score →
Independent, rubric-scored tables for the services behind this story.
Top rated: Uniswap 8.7
Swap venues where you never hand over your keys.
5rated →
Top rated: TradingView 8.5
Terminals, bots, screeners and portfolio trackers.
4rated →
Top rated: Kraken 8.4
Centralised venues that hold your funds while you trade.
6rated →