GMX Paid A Hefty Prize Because Of This Flaw

GMX, a decentralized exchange, awarded Collider Research a $1 million bug bounty in 2022. This payout was in recognition of their discovery of a critical bug in GMX’s smart contracts that directly affected how the protocol tracks outstanding debt.

The Bug Affecting GMX And GLP

GMX has not provided more information on how the bug was patched and when. However, the DEX operator said the bug negatively impacted GMX v1 liquidity providers (LPs) as the code led to inaccuracies in quotes related to “the fair value of tokens.” Specifically, the bug affected the Global Liquidity Pool (GLP), causing it to deviate from its fair value. 

Since GMX supports up to 50X leverage, a system tracks debt borrowed by traders and how it is repaid. It is smart contract-driven, and the trader enters into debt for every leveraged position. If prices move against them, they are liquidated, and the margin securing the leveraged position is transferred to the protocol.

Any disruption to this mechanism can severely affect GMX, impacting revenue and disincentivizing liquidity providers from engaging.

In September 2022, a flaw affecting GLP and impacting the DEX’s “minimal fee” and “zero price impact” features saw an unidentified exploiter make way with over $570,000 from the AVAX/USD marketplace. 

AVAX price on September 29. Last year this pair was exploited after a flaw in GMX| Source: AVAXUSDT on Binance, TradingView

By deploying on Arbitrum, a layer-2, and Avalanche, a high throughput and low-fee blockchain, the protocol supports low-fee swapping powered by GLP, a liquidity pool holding all assets traded on GMX. From the GLP, liquidity providers who could have been significantly impacted can earn fees from swap fees, spreads from leverage trading, and whenever there is asset rebalancing.

Bounty Program Can Reward Up To $5 Million

Further details show that GMX’s bug bounty program focuses on ensuring their smart contracts and application function as designed without weakness, considering the trustless nature of swaps. The goal is to prevent theft of user funds through various means, including unauthorized transfers, price manipulation of GLP, freezing, and other threat vectors.

Whenever there is a flaw, and the white hacker identifies it, the GMX bug bounty program will distribute rewards depending on the flaw’s severity. However, any submission must accompany a report demonstrating how the code error impacts the protocol before being reviewed and the reward distributed.

Even so, in GMX, all critical smart contract vulnerabilities are subject to a 10% cap on the potential damage it would have caused. The maximum bounty paid to developers who pick out critical code flaws is $5 million.



from Bitcoinist.com https://ift.tt/K9RFsM8
via IFTTT

Popular posts from this blog

Do Kwon’s Detention Prolonged Until 2024 As Montenegro Responds To Extradition Requests

Image
According to an International Business Times report , Montenegro’s Supreme Court decided to extend the detention of TerraForm Labs founder and CEO Do Kwon until February 2024, following extradition requests from the United States and South Korea. Closed-Door Discussions Reveal Montenegro’s Plan For Do Kwon Initially set to be extradited to the US on December 15, Do Kwon’s fate turned when the Montenegrin High Court ruled to prolong his stay until February 15, 2024. The decision stems from charges related to the collapse of the TerraUSD stablecoin, which led to significant financial losses. The High Court had previously ordered Kwon’s extradition by Friday, but his defense team appealed the decision in the appellate court in Podgorica, the capital of Montenegro. The Montenegrin Court of Appeal confirmed that Kwon contested the High Court’s ruling, vehemently stating, “I do not submit to the court’s decision.” Recent reports indicate that Montenegro’s Justice Minister, Andrej Mil
Read more

Sam Bankman-Fried Trial Begins Tomorrow: 3 Reasons Ex-SEC Official Foresees Conviction

Image
The trial of Sam Bankman-Fried, the founder of cryptocurrency exchange FTX and hedge fund Alameda Research, is set to commence in New York on Tuesday, October 3.  This comes almost a year after the collapse of both FTX and Alameda Research. The events leading up to the trial paint a picture of alleged fraudulent activities and money laundering that caused significant damage to the businesses involved. Ex-SEC Official’s Bleak Prediction As Sam Bankman-Fried Trial Commences In a nutshell, Alameda Research purportedly took customer deposits from FTX and invested them in fictitious crypto tokens, which derived their value from the confidence in FTX’s operations.  When this confidence waned, FTX and Alameda Research suffered substantial losses, which many argue contributed to a broader disillusionment in the cryptocurrency industry.  Following an investigation, federal authorities uncovered numerous alleged crimes, leading to seven federal fraud and money-laundering charges against B
Read more

April’s Crypto Game-Changers: 7 Events Set To Drastically Impact The Course Of Digital Currencies

Image
As the crypto market ended March positively, the industry gears up for an eventful April, marked by crucial developments and milestones that could significantly impact the digital asset landscape.  Crypto Halvings And Regulatory Deadlines The month starts with the Bitcoin Cash (BCH) halving event scheduled for April 2nd. Similar to Bitcoin (BTC), BCH undergoes a halving approximately every four years, which reduces mining profits for BCH miners.  On April 10, the US is scheduled to announce March’s Consumer Price Index (CPI), a vital indicator that measures the average price change paid by urban consumers for a basket of goods and services.  The Federal Reserve closely monitors the CPI as it influences inflation and, consequently, the central bank’s decisions regarding interest rates. Any changes in interest rates can ripple effect on the overall crypto market performance. April 19 marks the deadline for the US Securities and Exchange Commission (SEC) and US crypto exchange Coin
Read more