Хакер вернул украденные средства после эксплоита GMX на $40 млн

cryptonews.ruОпубліковано о 2024-05-12Востаннє оновлено о 2025-07-12

Злоумышленник, эксплуатировавший уязвимость в децентрализованной бирже GMX v1 и похитивший $40 млн в криптовалютах, начал возвращать средства после отправки ончейн-сообщения с соответствующим обещанием.

В сообщении, обнаруженном компанией по блокчейн-безопасности PeckShield, хакер написал: «Хорошо, средства будут возвращены позже», согласившись с условиями вознаграждения от команды GMX.

Хакер начал возвращать украденные средства

Спустя почти час злоумышленник приступил к возврату криптоактивов. На момент написания статьи адрес, помеченный как GMX Exploiter 2, вернул около $9 млн в эфире (ETH) на указанный GMX Ethereum-адрес.

PeckShield зафиксировала возврат примерно $5,5 млн в токенах FRAX, после чего хакер перевел еще $5 млн FRAX. К текущему моменту возвращено около $20 млн.

Эксплоит, произошедший в среду, затронул пул ликвидности GMX v1 — первую версию платформы для перпетуального трейдинга, развернутую на Arbitrum.

Злоумышленник воспользовался конструктивным недостатком для манипуляции стоимостью токенов GLP, что позволило вывести различные криптоактивы с платформы.

Ончейн-сообщение от эксплойтера GMX с обещанием вернуть средства. Источник: Arbiscan.

GMX предложил хакеру $5 млн вознаграждения

В публикации на X команда GMX признала навыки злоумышленника и предложила $5 млн за возврат похищенных средств, пообещав классифицировать выплату как вознаграждение за обнаружение уязвимости.

«Вы успешно провели атаку, и ваши навыки очевидны при анализе транзакций, — написали представители GMX. — Вознаграждение в $5 млн за обнаружение уязвимости остается в силе».

Команда пояснила, что это позволит хакеру избежать рисков, связанных с использованием украденных средств, и даже предложила предоставить подтверждение происхождения денег при необходимости.

В ончейн-сообщении GMX также предупредила о готовности начать юридическое преследование через 48 часов в случае отказа вернуть активы. Было предложено оставить 10% от суммы в качестве вознаграждения при условии возврата 90% средств на указанные адреса.

Ончейн-сообщение команды GMX эксплойтеру. Источник: Arbiscan.

Трендові криптовалюти

CitreaCTR

wrapped stUSDTWSTUSDT

Velodrome FinanceVELODROME

BrevisBREV

ZRX（0X）ZRX

PancakeSwapCAKE

Пов'язані матеріали

How Ethereum’s ‘Lean’ roadmap could reshape ETH over the next 4 years

Ethereum has entered a new development phase with the introduction of the 'Lean Ethereum' roadmap, a multi-year overhaul aiming to reshape the network's core protocol over the next 3-4 years. The plan focuses on major technical upgrades to improve scalability, security, and long-term resilience. Key components include implementing recursive STARKs, quantum-safe cryptography to guard against future threats, a multidimensional gas model, and a redesigned state architecture using Verkle trees. These changes aim to significantly increase transaction throughput, lower costs, and improve finality speed while maintaining backward compatibility. Infrastructure development is already underway, with initiatives like post-quantum secure devnets and the Glamsterdam upgrade laying the groundwork. Efforts are also focused on scalable state management and increasing the network's gas limits. The overarching goal is to future-proof Ethereum, enabling it to scale efficiently and securely throughout the next decade with minimal disruption to existing applications.

ambcrypto1 год тому

How Ethereum’s ‘Lean’ roadmap could reshape ETH over the next 4 years

ambcrypto1 год тому

Germany’s banking giants bring crypto to 80M customers – Why it matters

Germany's two largest banking networks, Sparkassen and Volksbanken Raiffeisenbanken, are integrating cryptocurrency trading directly into their banking apps, potentially reaching around 80 million customers. This marks a major shift as these groups previously deemed crypto too risky. They are building their own regulated infrastructure, such as the BaFin-approved "meinKrypto" platform, rather than partnering with external exchanges. While this integration brings crypto to a vast retail audience within a trusted framework, critics warn it could lead inexperienced investors to underestimate the high volatility and risks. Despite a recent decline in retail crypto trading volume, Germany remains a top-ten market. The move signifies a significant step in merging traditional banking with digital assets in Europe.

ambcrypto2 год тому

Germany’s banking giants bring crypto to 80M customers – Why it matters

ambcrypto2 год тому

Aerodrome Finance: Can AERO target $0.65 after a 22% weekly rally?

Aerodrome Finance (AERO) has rallied strongly, gaining 22% in the past week. After holding support at $0.45, the altcoin reached $0.60 for the first time since January and was trading at $0.58 at the time of writing. Technical indicators show bullish momentum, with the RSI at 67 and the DMI Modified indicator rising sharply, suggesting a strengthening uptrend. This price movement is supported by significant market demand. Open Interest in derivatives surged 10% to $56 million in a day, and spot trading has shown a positive buy-sell delta over recent days, with net exchange flow turning negative, indicating accumulation. Analysts suggest that if bullish pressure continues, AERO could target $0.65. However, a failure to sustain above $0.60 could weaken the trend, potentially leading to a retest of the $0.46-$0.50 support zone.

ambcrypto3 год тому

Aerodrome Finance: Can AERO target $0.65 after a 22% weekly rally?

ambcrypto3 год тому

Why the UXLINK hacker’s 14,336 ETH transfers raise fresh questions for DeFi

Recent on-chain activity reveals the UXLINK exploiter is actively laundering stolen funds, complicating tracing efforts. The September 2025 hack, which exploited a 'delegateCall' vulnerability to steal roughly $4.5 million, involved converting illicit assets into DAI and Ethereum. Recently, the attacker swapped over 10 million DAI for approximately 6,000.8 ETH and has deposited a total of 14,336.6 ETH into the privacy mixer Tornado Cash in recent weeks, including over $8.1 million worth in a single move. Simultaneously, wallets connected to the defunct Mining Express Ponzi scheme have been converting long-held assets, swapping 5,004 ETH for 8.8 million DAI. Following a separate exploit of the Jaredfromsubway.eth MEV bot, about $5.1 million was also routed to Tornado Cash. These incidents underscore a critical vulnerability in DeFi: while enabling permissionless transfers, the ecosystem lacks effective mechanisms to halt or manage illicit funds once in motion, allowing them to be moved and concealed relatively easily. This highlights the need for strengthened cross-network coordination and real-time threat detection to better safeguard the space.

ambcrypto5 год тому

Why the UXLINK hacker’s 14,336 ETH transfers raise fresh questions for DeFi

ambcrypto5 год тому

Li Fei-Fei's Latest Long-Form Article: When Video Generation, Robotics, and NVIDIA All Call Themselves World Models, We Need a Taxonomy

In a new article, Dr. Fei-Fei Li addresses the widespread and often inconsistent use of the term "world model" in AI. She proposes a clear, functional taxonomy rooted in the classic Partially Observable Markov Decision Process (POMDP) loop (agent → action → state → observation → agent). According to this framework, current systems called "world models" are different projections of this loop, categorized by their primary output: 1. **Renderers**: Output observations (pixels). Their goal is visual fidelity for human consumption (e.g., video generation models like Sora). They are the most commercially mature but are limited by a focus on appearance over physical accuracy. 2. **Simulators**: Output states (geometric, physical, dynamic representations). They provide a structurally accurate world for both human professionals (e.g., architects) and computational agents (e.g., robots for training). Li argues simulators are the crucial, underappreciated bridge, as they can underpin both rendering and planning. 3. **Planners**: Output actions. Given an observation and a goal, they decide what an agent should do next (e.g., robotic action models). This area is highly promising but remains the least mature for real-world deployment. Li highlights a key trend: the boundaries between these three categories are beginning to blur, as they all rely on a shared underlying understanding of geometry, physics, and dynamics. The logical endpoint is a unified world foundation model capable of switching between rendering, simulation, and planning based on downstream needs. This convergence, she concludes, is central to advancing spatial intelligence—enabling machines not just to talk about the world, but to truly understand, imagine, and interact with it.

marsbit6 год тому

Li Fei-Fei's Latest Long-Form Article: When Video Generation, Robotics, and NVIDIA All Call Themselves World Models, We Need a Taxonomy

marsbit6 год тому

Торгівля

Спот

Обговорення

Ласкаво просимо до спільноти HTX. Тут ви можете бути в курсі останніх подій розвитку платформи та отримати доступ до професійної ринкової інформації. Нижче представлені думки користувачів щодо ціни GMX (GMX).