SlowMist: GMX was attacked because the average short price of GMX v1 can be manipulated, and the price of GLP was maliciously raised for arbitrage

Odaily Planet News: Slowmist CISO @im23pds posted on X platform, stating: "The root cause of the GMX attack is that GMX v1 immediately updates the global short average price when processing short positions, and this global average price directly affects the calculation of total assets under management (AUM), thereby manipulating the GLP token price. The attacker exploited this design flaw by using the Keeper's timelock.enableLeverage feature when executing orders (a necessary condition for creating large short positions), successfully creating a large short position through re-entrancy to manipulate the global average price, artificially raising the GLP price in a single transaction and profiting through redemption operations."