损失超过 4000 万美元，GMX 攻击原理分析

链捕手Publicado em 2025-07-10Última atualização em 2025-07-10

作者：BlockSec

GMX 遭遇黑客攻击，损失超过 4000 万美元。攻击者利用了一个可重入漏洞，并在合约启用杠杆功能的情况下开空头头寸，实施了攻击。

问题的根源在于 executeDecreaseOrder 函数被错误使用。该函数的第一个参数本应是外部账户（EOA），但攻击者传入了一个智能合约地址。这使得攻击者可以在赎回过程中重新进入系统，操纵内部状态，最终赎回的资产远超过其实际持有的 GLP 价值。

GLP正常赎回机制

在 GMX 中，GLP 是流动性提供者代币，代表对金库资产（如 USDC、ETH、WBTC）的份额。当用户调用 unstakeAndRedeemGlp 时，系统使用以下公式计算应返还的资产数量：

redeem_amount = (user_GLP / total_GLP_supply) * AUM

其中 AUM（管理资产总额）的计算方式为：

AUM = 所有 token 池的总价值 + 全局空头未实现亏损 - 全局空头未实现盈利 - 已预留金额 - 预设扣减（aumDeduction）

该机制保证了 GLP 持有者按比例获得金库的实际资产份额。

杠杆开启后的问题

当 enableLeverage 开启后，用户可以开设杠杆仓位（多头或空头）。攻击者在赎回 GLP 前，开设了大额的 WBTC 空头头寸。

由于空头一开仓便增加了全局空头规模，价格尚未变动的情况下系统默认该空头是亏损的，而这部分未实现亏损会被计为金库的“资产”，导致 AUM 人为上升。尽管金库并未实际获得额外价值，但赎回计算会基于这个虚高的 AUM，从而使攻击者获得了远超其应得的资产。

攻击流程

攻击交易

https://app.blocksec.com/explorer/tx/arbitrum/0x03182d3f0956a91c4e4c8f225bbc7975f9434fab042228c7acdc5ec9a32626ef?line=93

写在结尾

此次攻击暴露了 GMX 在杠杆机制与可重入保护设计上的严重缺陷。核心问题在于资产赎回逻辑对 AUM 的信任过高，未对其组成部分（如未实现亏损）进行足够审慎的安全校验。同时，关键函数对调用者身份的假设（EOA vs 合约）也缺乏强制性验证。该事件再次提醒开发者，在涉及资金敏感操作时，必须确保系统状态不可被操纵，尤其是在引入复杂金融逻辑（如杠杆、衍生品）时，更需严防重入与状态污染带来的系统性风险。

Leituras Relacionadas

Kraken Plans CFTC-Regulated Perpetual Futures For US Professional Traders

Kraken plans to launch CFTC-regulated perpetual futures for eligible US professional traders through its acquired derivatives exchange, Bitnomial. These contracts, featuring continuous pricing, no expiry, and regular funding, aim to provide a regulated domestic route to a product that is central to global crypto trading but has been largely inaccessible on US platforms. The offering is expected to be integrated into Kraken Pro, allowing traders to manage various exposures in one interface. Key factors for success will include eligibility criteria, contract design, and the development of sufficient liquidity. This move could pave the way for more regulated perpetual products in the US market.

bitcoinistHá 4h

Kraken Plans CFTC-Regulated Perpetual Futures For US Professional Traders

bitcoinistHá 4h

Warsh's Debut: Will the FED Chair Who Knows Crypto Best Bring Surprises or Shocks to the Market?

Kevin Warsh, the new Federal Reserve Chairman, prepares for his inaugural press conference amidst a challenging macroeconomic landscape: resurgent inflation, a bond market sell-off, and political pressure from President Trump for rate cuts. Uniquely, Warsh holds indirect investments in over 20 crypto and Web3 entities (e.g., Solana, dYdX), making him the first Fed Chair with disclosed crypto exposure. His stance may combine a hawkish, inflation-focused monetary policy with a crypto-friendly regulatory philosophy that shifts from Powell’s “same risk, same rule” approach toward a framework acknowledging blockchain’s productivity value. Warsh’s leadership could impact crypto markets across three dimensions: a paradigm shift in regulation (potentially accelerating pro-innovation legislation and stable币 rules), a re-pricing of risk premiums based on clearer communication and his view of AI as a structural disinflationary force, and a long-term reallocation of global institutional capital driven by increased legitimacy. Two potential scenarios for the press conference are outlined. A “positive surprise” would involve a dovish-leaning tone on rates coupled with signals of regulatory openness, potentially boosting crypto asset valuations. Conversely, a “negative shock” would see a more hawkish-than-expected stance on inflation and rates, triggering a broad risk-asset selloff that crypto markets would not escape. While ethics rules required Warsh to divest his crypto holdings upon confirmation, his deep understanding of the technology may fundamentally lower policy uncertainty and build a more receptive long-term foundation for digital assets’ integration into the mainstream financial system.

marsbitHá 4h

Warsh's Debut: Will the FED Chair Who Knows Crypto Best Bring Surprises or Shocks to the Market?

marsbitHá 4h

XRP Ledger Launches XRPLd Rebrand With Version 3.2.0 Upgrade

XRP Ledger has launched version 3.2.0, rebranding its core server software from "rippled" to "xrpld." This release focuses on back-end upgrades, including major memory optimizations that can reduce server memory usage by up to 40% and architectural improvements for future scaling. Key updates enhance security for features like vaults, lending, and decentralized exchanges, and introduce new invariant checks for ledger consistency. The upgrade also adds the capability for applications to retrieve protocol information without connecting to a server, aiding wallet and API development. Additional changes aim to improve enterprise connectivity and performance, featuring configurable block sizes and an updated default peering port, along with various fixes for core network functions.

TheNewsCryptoHá 5h

XRP Ledger Launches XRPLd Rebrand With Version 3.2.0 Upgrade

TheNewsCryptoHá 5h

AGI is Not the End, DeepMind's New Paper: Moving Towards ASI, the Real AI Progress Has Just Begun

In a new report, Google DeepMind researchers argue that achieving Artificial General Intelligence (AGI) is not the end goal, but rather a step toward Artificial Superintelligence (ASI). They outline four potential pathways for this transition: 1) continued scaling of compute, models, and data; 2) algorithmic evolution and potential paradigm shifts; 3) recursive self-improvement; and 4) multi-agent coordination and collective intelligence. The report also identifies six key bottlenecks that could hinder progress: data limitations (the "data wall"), economic and resource pressures, limitations of current neural network paradigms, increasing research difficulty, "abstraction barriers" in forming new concepts, and regulatory and societal pushback. Looking ahead, the authors emphasize the need for new evaluation methods once AI surpasses human benchmarks. They call for a large-scale, interdisciplinary effort to prepare for a future where AI-driven advancements could trigger transformative changes across multiple fields. The path and speed of progress remain uncertain, constrained by physical laws, computational complexity, and real-world feedback loops.

marsbitHá 6h

AGI is Not the End, DeepMind's New Paper: Moving Towards ASI, the Real AI Progress Has Just Begun

marsbitHá 6h

Kraken Launches Pre-IPO Perps For OpenAI And Anthropic With Up To 5x Leverage

Kraken has launched pre-IPO perpetual futures contracts for private AI giants OpenAI and Anthropic, offering eligible traders up to 5x leverage. These derivatives provide synthetic exposure to the companies' valuations ahead of any public listing, tapping into high investor demand for AI themes. However, the product carries unique risks compared to standard crypto perpetuals, as private company valuations lack transparent, continuous pricing and depend on funding rounds, secondary transactions, and IPO timelines. This move signals crypto exchanges' expansion into alternative speculative markets beyond digital assets, though it raises questions about risk management, liquidity, and investor understanding, especially when using leverage.

bitcoinistHá 6h

Kraken Launches Pre-IPO Perps For OpenAI And Anthropic With Up To 5x Leverage

bitcoinistHá 6h

Trading

Spot

Futuros

Artigos em Destaque

Como comprar GMX

Bem-vindo à HTX.com!Tornámos a compra de GMX (GMX) simples e conveniente.Segue o nosso guia passo a passo para iniciar a tua jornada no mundo das criptos.Passo 1: cria a tua conta HTXUtiliza o teu e-mail ou número de telefone para te inscreveres numa conta gratuita na HTX.Desfruta de um processo de inscrição sem complicações e desbloqueia todas as funcionalidades.Obter a minha contaPasso 2: vai para Comprar Cripto e escolhe o teu método de pagamentoCartão de crédito/débito: usa o teu visa ou mastercard para comprar GMX (GMX) instantaneamente.Saldo: usa os fundos da tua conta HTX para transacionar sem problemas.Terceiros: adicionamos métodos de pagamento populares, como Google Pay e Apple Pay, para aumentar a conveniência.P2P: transaciona diretamente com outros utilizadores na HTX.Mercado de balcão (OTC): oferecemos serviços personalizados e taxas de câmbio competitivas para os traders.Passo 3: armazena teu GMX (GMX)Depois de comprar o teu GMX (GMX), armazena-o na tua conta HTX.Alternativamente, podes enviá-lo para outro lugar através de transferência blockchain ou usá-lo para transacionar outras criptomoedas.Passo 4: transaciona GMX (GMX)Transaciona facilmente GMX (GMX) no mercado à vista da HTX.Acede simplesmente à tua conta, seleciona o teu par de trading, executa as tuas transações e monitoriza em tempo real.Oferecemos uma experiência de fácil utilização tanto para principiantes como para traders experientes.

138 Visualizações TotaisPublicado em {updateTime}Atualizado em 2026.06.02

Discussões

Bem-vindo à Comunidade HTX. Aqui, pode manter-se informado sobre os mais recentes desenvolvimentos da plataforma e obter acesso a análises profissionais de mercado. As opiniões dos utilizadores sobre o preço de GMX (GMX) são apresentadas abaixo.