I never expected that old protocols like GMX would steal 42M. In my understanding, smart contracts with protocols like GMX are just a recharge and withdrawal function, so it's hard to have contract vulnerabilities. I don't know if the private key has been leaked. I hope it can be recovered smoothly.