GMX-Abracadabra Integration Breach Costs $13M in ETH Amid Security Concerns

On March 25, 2025, a security breach targeting the integration between GMX and Abracadabra resulted in the theft of approximately $13 million worth of ETH. The incident, identified by blockchain security firm PeckShield, impacted the contracts tied to Abracadabra’s Spell cauldrons via GMX V2’s liquidity pools, while GMX confirmed that its core contracts were secure. The breach led to the theft of around 6,260 ETH, which has since been bridged from Arbitrum (ARB) to Ethereum and dispersed across three addresses. GMX and Abracadabra representatives are actively investigating the vulnerability, aiming to determine its root cause and mitigate further risks. This event follows a previous security lapse in January 2024 within the Abracadabra ecosystem, where vulnerabilities in the Magic Internet Money (MIM) contract were exploited. The hack underscores ongoing concerns about smart contract security and the integration risks between decentralized finance platforms.