News
Ratings
Learn
Companies
Open Companies →
Who runs each service, how it works, where the risks are.All 30 companies A–Z →
About
New to crypto? Start here
DeFi Protocols · OBOL rating

GMX Protocol review

Popularised paying liquidity providers from actual fees rather than emissions, then lost $40m to a re-entrancy bug in v1.

7.5/10
Solid
#10 of 15 defi protocolsChecked August 2026
The short answer

GMX popularised paying liquidity providers from actual trading fees rather than token emissions, with fully transparent pool composition and open interest. Its July 2025 v1 exploit cost around $40m before a partial return, and its LP model means providers are the house — profitable on average, painful in trends.

Best forReal-yield perpetuals infrastructure

Score breakdown

Category rubric →
  1. Security recordweight 25%
    6.5avg 8.0
  2. Economic designweight 20%
    7.5avg 7.8
  3. Real usageweight 20%
    8.0avg 7.9
  4. Governanceweight 20%
    7.5avg 7.4
  5. Transparencyweight 15%
    8.5avg 8.3

this service category average across 15Score = Σ mark × weight. Works well for a specific use case, weaker outside it. Methodology.

The evidence behind each mark

Scoring rules →
CriterionMarkWhat we foundSourceChecked
Security record6.5not sourced yetnot sourced yet—
Economic design7.5not sourced yetnot sourced yet—
Real usage8.0not sourced yetnot sourced yet—
Governance7.5not sourced yetnot sourced yet—
Transparency8.5not sourced yetnot sourced yet—

What we liked, and what fell short

Liked
  • Fee revenue distributed to LPs and stakers without emissions
  • Fully transparent pool composition and open interest
  • v2 architecture addressed the original design's weaknesses
Fell short
  • The July 2025 v1 exploit cost roughly $40m
  • LPs take the other side of trader positions, which is riskier than it looks

Why the marks landed where they did

Before GMX, DeFi yields were mostly emissions: protocols printed tokens to pay liquidity providers, and the yield disappeared when the printing stopped. GMX distributed actual trading revenue in ETH, which reframed what a sustainable return looks like and started the real yield narrative.

The pool-as-counterparty model

Liquidity providers deposit into a pool that takes the other side of every trade. Traders get oracle-priced fills with no slippage; providers earn fees, borrow costs and, on average, trader losses. The design works because most leveraged traders lose over time — and it means providers are directionally exposed and can lose heavily in a sustained trend where traders are correct.

v1, v2 and the exploit

v1 used a single pooled basket. v2 replaced it with isolated GM markets, each with its own backing assets, which contains risk per market. In July 2025 a re-entrancy vulnerability in v1 on Arbitrum allowed an attacker to manipulate pool accounting and extract roughly $40m; much was returned following a bounty offer, v2 was unaffected, and v1 was deprecated.

Where it stands

v2 operates across Arbitrum and Avalanche with real fee revenue and transparent on-chain state. Competition from Hyperliquid and other order-book venues has taken volume, and the borrow-fee model still makes long-held positions expensive.

Who should care

Traders wanting slippage-free entries, liquidity providers evaluating whether to be the house, and anyone assessing which DeFi yields are actually funded by revenue.

FAQ

What is real yield?
Returns funded by protocol revenue — trading fees, borrow costs — rather than by token emissions. GMX popularised the distinction.
What happened in the 2025 GMX exploit?
A re-entrancy flaw in v1 on Arbitrum let an attacker manipulate pool accounting for roughly $40m. Much was returned after a bounty offer; v2 was unaffected.
Is providing liquidity to GMX profitable?
Historically yes on average, from fees and trader losses, but providers take directional risk and lose in sustained trends where traders are correct.
Should I use GMX v1 or v2?
v2. It uses isolated markets with contained risk, and v1 was deprecated after the 2025 exploit.