The token, which trades mostly on decentralized exchange Uniswap, was changing hands at $1.99 when the firm paused withdrawals. It was recently trading at $2.82 after the firm said it is in talks with the hacker.
"We are investigating an unusual amount of borrows that came through the protocol- in the meantime, we have paused all borrowing. Thank you for your patience," the Tender.fi team wrote on Twitter.
Blockchain sleuth Lookonchain said that due to a misconfigured pricing oracle, a white hat attacker borrowed $1.59 million in assets despite depositing only one GMX token worth $71.
A white hat hacker is someone who attacks a platform before returning the loot.
UPDATE (Mar. 7, 12:46 UTC): Updates headline and story, updates token movement.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.