SlowMist monitoring shows that GoldPesaToken suffered a loss of approximately $114,900 due to a vulnerability in the GPXHooks contract. The exploit stemmed from the `reBalance()` function, which failed to verify whether the currency delta of GPX/USDC was zero during the liquidity operation triggered by the PoolManager unlock process calling the shared PositionManager. The attacker exploited this by pre-creating an unsettled debt of around 115,000 USDC and, after triggering the GPX pool rebalance, used the debt to offset the USDC credit obtained from the hook. They then cleared the debt by destroying their own position and ultimately withdrew approximately 115,000 USDC from the PoolManager. https://(wublock123.com)/news/slowmist-goldpesa-token-gpxhooks-contract-exploit-114900-loss-69491