On 2024-07-11, GMX suffered a phishing drainer incident resulting in approximately $5,218,469 in losses. The exploit targeted the human_op layer. Attribution: internal. This is a demonstration entry — not a real incident.
Matches the reentrancy predicate
Matches the rug pull hard predicate
Matches the phishing drainer predicate
Matches the ice phishing approval predicate
Matches the rug pull soft predicate
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the counterparty default predicate
subsector_tags = general_defi, infra_toolingoracle_providers = Chainlinkchain_deployments = Arbitrummethod_b_root_causes = reentrancy, ice_phishing_approval, rug_pull_hardkms_provider = unknownfrontend_host = ipfssubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = rug_pull_hard, rug_pull_softkms_provider = unknownsubsector_tags = consumer_app, infra_tooling, general_defioracle_providers = Chainlinkchain_deployments = Arbitrumkms_provider = unknownsubsector_tags = general_defi, consumer_apporacle_providers = Chainlinkmethod_b_root_causes = reentrancy, counterparty_defaultkms_provider = unknownsubsector_tags = general_defi, consumer_apporacle_providers = Chainlinkmethod_b_root_causes = reentrancysubsector_tags = general_defi, consumer_apporacle_providers = Chaos, Chainlinkchain_deployments = Avalanchemethod_b_root_causes = reentrancysubsector_tags = consumer_app, general_defi, infra_toolingmethod_b_root_causes = reentrancystablecoin_dependencies = USDC, USDT, DAIkms_provider = unknownsubsector_tags = infra_tooling, consumer_app, general_defioracle_providers = Chainlinkchain_deployments = Arbitrumfrontend_host = ipfssubsector_tags = general_defi, infra_toolingoracle_providers = Chainlinkchain_deployments = Arbitrumsubsector_tags = consumer_app, general_defi, infra_toolingoracle_providers = Chainlinkchain_deployments = Arbitrum, Avalanchemethod_b_root_causes = rug_pull_soft