GMX Breach: Hacker Returns $20M, Keeps 10% as Reward

Cryptos: 21,330
Exchanges: 1,863
Market Cap: $3.67T 1.18%
24h Vol: $628,238,076,413 12.56%
Dominance: BTC: 63.3% ETH: 9.7%
Gas: 1 GWEI

Connect

Crypto News Exploits

GMX Breach: Hacker Returns $20 Million, Keeps 10% as Reward

Written by Aaron S.,

Editor-In-Chief

Last Updated: July 11, 2025

Key Takeaways

Hacker who stole $40 million from GMX began returning funds after accepting a 10% bounty offer;
About $20 million has been returned so far, including Ethereum and FRAX stablecoins;
GMX warned legal action would follow if 90% of the funds were not returned within 48 hours.

Ace quick missions & earn crypto rewards while gaining real-world Web3 skills. Participate Now! 🔥

GMX Breach: Hacker Returns $20 Million, Keeps 10% as Reward

BITDEGREE IN YOUR SOCIAL FEED

A hacker who recently drained $40 million from GMX’s $0 original trading platform, GMX V1, has begun returning the funds, following an agreement with the GMX team.

The return process began after the hacker posted a message on the blockchain. The message was noticed by PeckShield, which confirmed that the hacker had accepted GMX’s offer of a reward for returning the money.

The hacker sent back around $9 million worth of Ethereum ETH $2,949.87 to an address that GMX had publicly shared.

What is a Liquidity Pool in Crypto? (Animated)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

PeckShield later confirmed two additional transactions, each involving the transfer of FRAX FRAX $0.9993 stablecoins, one for $5.49 million and the next for $5 million. In total, about $20 million has been returned.

Following the incident, GMX posted on X on July 10 to address the hacker directly. The team acknowledged the hacker’s skills and offered a $5 million "white hat" reward.

The team said they would help prove the source of the funds so they could be used without risk of being frozen or flagged.

The trading platform also noted that the hacker could retain 10% of the stolen amount, provided that 90% was returned to the addresses listed by GMX. However, GMX warned that if the funds were not returned within 48 hours, they would take legal action.

On July 10, Venn Network researchers stopped a security breach that could have stolen more than $10 million from decentralized finance (DeFi) projects. How? Read the full story.