ezhrtseh
@fherthetj
GMX v1 had a flaw in handling short positions. It instantly updated the global short price, messing with AUM calculations. This let attackers manipulate GLP token prices. They exploited Keeper's timelock feature to create huge short positions. Using reentrancy, they artificially inflated GLP prices in one trade. Then they cashed out by redeeming GLP for profit.
0 reply
0 recast
0 reaction