$42M appeared to vanish from @GMX_IO V1 - July 9 via cross-contract reentrancy exploit introduced by a 2022 bug fix.

Attacker manipulated globalShortAveragePrices to inflate GLP pricing, but funds were later recovered in coordinated disclosure - $5M bounty paid.

Story below https://t.co/qlah9SGOdE