Back to dashboard
Sunday, November 2, 2025 at 11:00 UTC

GMX v2

Sequencer-induced oracle skew exploited for perps PnL.

Partial
Funds stolen
$42.00M
Recovered
$5.00M12%
Still outstanding
$37.00M
Chain
Arbitrum
Category
DeFi
Attack vector
Oracle Manipulation
Reported by
PeckShield
Incident ID
h2025-5

Exploit & recovery timeline

  1. Nov 2, 2025 · 09:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the oracle manipulation exploit against GMX v2.

  2. Nov 2, 2025 · 11:00 UTC
    Exploit executed

    $42.0M drained from GMX v2 on Arbitrum via Oracle Manipulation.

  3. Nov 2, 2025 · 12:00 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Nov 2, 2025 · 15:00 UTC
    Protocol response

    GMX v2 paused affected contracts or withdrawals and began tracing outbound flows.

  5. Nov 3, 2025 · 11:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Nov 9, 2025 · 11:00 UTC
    Partial recovery

    $5.0M of $42.0M recovered (12%); the remainder is still unaccounted for.

  7. Dec 2, 2025 · 11:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.