CertiK has identified a significant security breach on the decentralized exchange TMX, resulting in a $1.4 million loss. The attack targeted an unverified smart contract on the Arbitrum network. The hacker exploited the contract by repeatedly minting and staking TMX LP with USDT, then swapping USDT for USDG, unstaking, and selling USDG. This cycle allowed the attacker to deplete the contract's USDT, wrapped SOL, and WETH assets.