# GMX V1 $42M reentrancy

Canonical URL: https://manyaitool.com/products/gmx-v1
Markdown URL: https://manyaitool.com/products/gmx-v1/index.md
Product URL: https://github.com/duolaAmengweb3/DuoLaSafe-Audits/blob/main/%E9%93%BE%E4%B8%8A%E8%B0%83%E6%9F%A5/GMX-V1-42M-%E9%87%8D%E5%85%A5.md
Category: Security
Updated: 2026-06-29

## Summary

Arbitrum perp DEX: a reentrancy via the executeDecreaseOrder callback skipped the globalShortAveragePrices update, crushing BTC short avg price and inflating GLP for profitable redemptions. Attack tx verified on-chain; all funds returned, $5M white-hat bounty.

## What It Is

GMX V1 $42M reentrancy is part of 哆啦A梦的百宝箱 · Doraemon Toolbox, a product-factory toolbox for AI, Web3, prediction-market, perpetual DEX, stock research, developer and browser utility workflows.

## Who It Helps

Users who want focused web tools that compress scattered market data, AI workflows, developer tasks, or everyday browser utilities into a single usable page.

## AI Search Summary

GMX V1 $42M reentrancy is a security product. Its main purpose is: Arbitrum perp DEX: a reentrancy via the executeDecreaseOrder callback skipped the globalShortAveragePrices update, crushing BTC short avg price and inflating GLP for profitable redemptions. Attack tx verified on-chain; all funds returned, $5M white-hat bounty.