From Villain to Hero: GMX Hacker Returns Stolen Millions After Bounty Deal 🤑

by

Amidst the digital chaos, a cyber attacker, once a shadowy figure in the night, has decided to turn over a new leaf. The stolen millions from GMX’s V1 GLP pool are now on their way back, like a prodigal son returning home with a heavy heart and an even heavier wallet. 🤑

According to the watchful eyes of PeckShield Alert, the GMX hacker has returned a staggering $37.5 million worth of the stolen assets to the protocol. The funds were transferred in several installments of ETH and FRAX around 8:00 AM UTC, representing nearly 90% of the $42 million drained just two days ago. It’s as if the hacker had a sudden change of heart, or perhaps just a change of mind. 🤔

#PeckShieldAlert #GMX Exploiter has returned a total of $37.5M worth of cryptos, including ~9K $ETH & 10.5M $FRAX to the #GMX Security Committee Multisig address

— PeckShieldAlert (@PeckShieldAlert) July 11, 2025

“Ok, funds will be returned later,” the hacker wrote in an on-chain message, as if it were a casual text to a friend. And true to their word, the funds began to flow back. 🌊

The native token GMX (GMX) jumped 16% on the news, a modest recovery from the 28% drop it suffered in the immediate aftermath of the exploit. While GMX has yet to publicly acknowledge the return, the protocol thanked the hacker on-chain. “Thank you, we greatly appreciate this,” the team wrote, as if they were accepting a belated birthday gift. 🎂

It remains unclear whether the attacker intends to return the remaining $4.5 million from the exploit. Perhaps they’re saving it for a rainy day, or maybe they’re just holding out for a better deal. 🤷‍♂️

The GMX hack stands as one of the largest industry exploits this year, joining the ranks of other high-profile victims like Bybit, which suffered a $1.4 billion hack by the notorious North Korean hacker group Lazarus, and Cetus Protocol, which was drained for $223 million. Like GMX, Bybit also offered a 10% bounty to recover the funds, but unlike GMX, they’re still waiting for their return. 🕰️

Read More

2025-07-11 16:14