Decentralized perpetual futures trading exchange GMX gave a $1 million bug bounty to Collider’s research team for finding a bug in an internal mechanism tracking outstanding debt. The bug bounty was handed out in 2022 but details of the bug are only now being made available. GMX has patched the bug.

The bug resulted in liquidity providers on GMX V1 receiving inaccurate quotes on the fair value of tokens. This resulted in the price of GLP, the exchange’s liquidity provider token, moving from its fair value. 

"Our top priority is risk management. For every position, we implement an extensive due diligence process, which encompasses thorough reviews, relying not only on external sources but also on our own audits,” said Shlomo Kraus, head of Collider Research.

Collider is an …