On July 9, 2025, GMX V1 perpetuals on Arbitrum suffered a $42M exploit through reentrancy in executeDecreaseOrder(). Attacker exploited the assumption that _account is an EOA, using a contract to reenter, manipulate short positions, inflate GLP price, and profit via redemptions; attacker returned funds July 12, keeping a $5M bounty.