GMX - Rekt
DeFi / Crypto - $42 million appeared to vanish from GMX V1 on July 9 via cross-contract reentrancy exploit introduced by a 2022 bug fix. Attacker manipulated globalShortAveragePrices to inflate GLP pricing, but funds were later recovered in coordinated disclosure - $5M bounty paid.
