GMX has publicly acknowledged the $42 million exploit on its V1 platform and is offering the attacker a 10% white-hat bounty—approximately $4.2 million—if the stolen funds are returned within 48 hours.