9/ Despite the attacker bridging funds off Arbitrum in the aftermath of the attack, they have since come to an agreement with GMX where $37 million will be returned, with the “user” keeping a $5 million bounty.

https://t.co/k5vQuFU3pZ

There was a security vulnerability in the GMX V1 codebase that was disclosed. GMX V1 forks were also safely notified.

We would like to recognise the actions of 0xDF3340A436c27655bA62F8281565C9925C3a5221 in this recovery. A potential exploitable amount of $42 million belonging to GLP holders was secured.

After payment of a $5 million bounty to the user, the remaining funds are now safely in the GMX Security Multisig.

Contributors are working on a proposed distribution plan for presentation to the GMX DAO and will share more information shortly.