Decentralized exchange GMX suffers $565K price manipulation 'exploit'

cointelegraph.com:

Decentralized exchange (DEX) GMX has reportedly suffered a price manipulation exploit from an exploiter who managed to make off with around $565,000 from the AVAX/USD market.

The unidentified exploiter is understood to have capitalized on GMX’s “minimal spread” and “zero price impact” features to pull off the exploit, which impacted GLP token holders who provided liquidity in the form of AVAX (the Avalanche token) to GMX.

GMX confirmed the price manipulation exploit in a Sept. 18 post on Twitter, but stated that the AVAX/USD market would remain open despite imposing a $2 million cap on long positions and $1 million cap on short positions.

We were notified of price manipulation of AVAX/USD on reference exchanges by monitoring systems and community members.While we review the occurrence, open-interest for AVAX has been capped at $2m long / $1m short.GLP and GMX trading markets continue to operate normally.

Head of Derivatives at Genesis Trading Joshua Lim was one of the first to analyze the exploit, stating that the exploiter “successfully extracted profits from GMX's AVAX/USD market by opening large positions at 0 slippage” before transferring the AVAX/USD to centralized exchanges at a slightly higher price.

Lim said this exploit method was repeated five times, with the first cycle taking effect at 01:15 UTC on Sept. 18. Each cycle transferred more than 200,000 AVAX tokens, (roughly $4-5 million per cycle) with the exploiter extracting about $565,000 in profit after paying spread to market makers on other exchanges.

3/ let's take a look at the first cycle which took place from 01:15:31 to 01:28:11 UTC. X was able to extract roughly $158k in profit by trading clips of $4-5mm at a time pic.twitter.com/W6eu7Iz6lz

Lim however noted