Mixer withdrawal → protocol interaction
GMX v2 (GMX Synthetics)'s assessment for RD-F-090 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No confirmed mixer-funded wallet interaction with GMX v2 core contracts (ExchangeRouter 0x1C3fa76e6E1088bCE750f23a5BFcffa1efEF6A41, DataStore 0xFD70de6b91282D8017aA4E741e9Ae325CAb992d8, OrderVault 0x31eF83a530Fde1B38EE9A18093A333D8Bbbc40D5) at assessment date 2026-05-05. The July 2025 v1 exploit attacker was funded via Tornado Cash (2 ETH on 2025-07-07 per Cyvers/Decrypt analysis), but targeted v1 GLP pool contracts only; GMX v2 was not involved. Threshold: wallet withdrew from Tornado Cash/Railgun within 30 days AND value >$100k AND >=2 attribution sources. Signal would not fire today.
Sources #
- URLhttps://www.halborn.com/blog/post/explained-the-gmx-hack-july-2025retrieved 2026-05-05
- https://decrypt.co/329821/gmx-hacker-white-hat-returns-40-million-sends-rest-to-tornado-cashretrieved 2026-05-05
- https://x.com/GMX_IO/status/1943336664102756471retrieved 2026-05-05
Methodology #
Detect whether a wallet that recently withdrew from Tornado Cash, Railgun, or similar mixer has interacted with this protocol.
See the full factor methodology and distribution across all protocols →