10/ On July 9, 2025 GMX was exploited for $40M.
9M USDC sat for 2+ hours and was partially bridged from Arbitrum to Ethereum via CCTP.
While the exploiter later returned assets minus a $5M bounty, the USDC was not frozen during the 2+ hour window.
Theft address
0xDF3340A436c27655bA62F8281565C9925C3a5221
