Bounty

Million

<ul class="list-ic vertical"> 
 <li> 1 <a>Near the month’s end, GMX announced a partnership with Bitget Wallet.</a> </li> 
 <li> 2 <a>Due to a critical bug in its smart contracts, GMX paid a hefty prize.</a> </li> 
</ul> 
A decentralized perpetual exchange, GMX, announced its partnership with Bitget Wallet. With the following partnership, the user now can trade cryptocurrencies such as BTC, ETH, and more. Their team-up will also provide “up to 50x leverage directly from user wallet.” 
<blockquote class="twitter-tweet"> 
 🩵x <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1fad0.png" alt="🫐" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://twitter.com/hashtag/BitgetWallet?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#BitgetWallet</a> is thrilled to announce our collaboration with <a href="https://twitter.com/GMX_IO?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@GMX_IO</a> <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f525.png" alt="🔥" class="wp-smiley" style="height: 1em; max-height: 1em;"> GMX is a decentralized perpetual exchange, where you can trade BTC, ETH and more with up to 50x leverage directly from your wallet! <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f440.png" alt="👀" class="wp-smiley" style="height: 1em; max-height: 1em;"> Check them out now! <a href="https://t.co/uUrK7hxu5m" rel="noopener noreferrer nofollow">pic.twitter.com/uUrK7hxu5m</a>— Bitget Wallet (Formerly BitKeep) (@BitgetWallet) <a href="https://twitter.com/BitgetWallet/status/1707606125145935884?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 29, 2023</a> 
</blockquote> 
On the other hand, according to a recent media report, GMX has paid “a hefty prize due to a flaw.” The decentralized exchange (DEX) awarded Collider Research a $1 Million bug bounty, last year. The payout was in the identification of their discovery of a critical bug in its smart contracts. As per the report, it has “directly affected how the protocol tracks outstanding debt.” 
<h2 class="wp-block-heading" id="strong-the-bug-causing-gmx-strong">The Bug Causing GMX</h2> 
As per the media report, the DEX did not provide further information on how and when the bug was patched. However, the GMX operator stated that the bug affected GMX v1 liquidity providers (LPs) as the code led to inaccuracies in quotes related to “the fair value of tokens.” Specifically, the bug affected the Global Liquidity Pool (GLP) which caused it to deviate from its fair value. 
Last year in September, a flaw affecting GLP and impacting the GMX’s “minimal fee” and “zero price impact” features saw an unidentified exploiter make way with over $570K from the AVAX/USD marketplace.&nbsp; 
The report also presented the analysis that by deploying on Arbitrum, a layer-2 (L2), and Avalanche, a high throughput and low-fee blockchain, the protocol supports low-fee swapping powered by GLP, a liquidity pool holding all assets traded on the DEX. “From the GLP, liquidity providers who could have been significantly impacted can earn fees from swap fees, spreads from leverage trading, and whenever there is asset rebalancing.” 
<h3 class="wp-block-heading" id="strong-the-bounty-program-strong">The Bounty Program</h3> 
As noted in the report, the bug <a href="https://www.thecoinrepublic.com/2023/03/31/solana-based-raydium-proposed-for-2m-bug-bounty-fund/" rel="noopener noreferrer nofollow">bounty </a>program can reward up to $5 Million. The program focuses on ensuring their smart contracts and applications function as designed without weakness, considering the trustless nature of swaps. As mentioned, the goal is to prevent theft of user funds through various means, including unauthorized transfers, price manipulation of GLP, freezing, and other threat vectors. 
If there is a flaw, and the white hacker identifies it, the DEX bug bounty program will distribute rewards depending on the flaw’s severity. However, any submission must accompany a report demonstrating how the code error impacts the protocol before being reviewed and the reward distributed. 
Nevertheless, in the <a href="https://www.thecoinrepublic.com/2023/08/30/5-best-dex-perps-platforms-to-offer-high-profits-in-2023/" rel="noopener noreferrer nofollow">DEX</a>, all critical smart contract vulnerabilities are subject to a 10% cap on the potential damage it would have caused. “The maximum bounty paid to developers who pick out critical code flaws is $5 Million,” the report also mentioned.

GMX Joined Hands with Bitget Wallet; Allows Crypto Trading

Table of Contents

Thecoinrepublic.com

Other articles published on Sep 30, 2023

Janet Yellen Says Government Shutdown Could Bring a Recession

SBI establishes a joint cryptocurrency venture in Japan with TradeFinex from the UAE.

What Gaming Laptop Should I Buy?

How a U.S. Government Shutdown Could Reshape the Crypto Landscape?

FTX hacker's wallet stirs as Ethereum ETFs prepare for U.S. debut

Slack chat logs are discounted by Do Kwon as irrelevant proof.

Join our free newsletter for daily crypto updates!