According to CoinMeta, monitoring by Slowmist, goldpesatoken suffered a loss of approximately $114,900 due to a contract vulnerability in gpxhooks. The vulnerability stemmed from the fact that rebalance () did not verify whether the currency and delta of gpx / USDC were reset to zero during the poolmanager unlock process when calling shared positionmanager for liquidity operations. The attacker took advantage of this to pre-create an unsettled liability of about 115,000 USDC. After triggering the gpx pool rebalancing, the attacker used this liability to offset the credit obtained through the hook, and then cleared the liability by destroying their own position. In the end, they withdrew approximately 115,000 USDC from poolmanager.