GMX confirms it was hacked and calls out to the hacker address on-chain: requesting the return of 90% of the funds, willing to offer a 10% white hat bounty.