Synthetix BFP 2

Guardian Audits3 Mar 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed Synthetix (Synthetix BFP 2) on 3 Mar 2025: 49 findings, 2 critical; 27 marked fixed, 22 acknowledged.

2 critical findings, fixed

Open the report Open Synthetix’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings49

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	0	2	8
Medium	0	14	5
Low	0	6	12

HighLiquidations Errantly Adjust Funding CorrectionAcknowledged

The report gives no description here.

HighLPs Can Game Liquidations Via mintUsdAcknowledged

The report gives no description here.

MediumAttacker Profits From Block Stuffing OrdersAcknowledged

The report gives no description here.

MediumBFP Market Liquidations May Liquidate LPsAcknowledged

The report gives no description here.

MediumDebt Is Not Reflected In CreditCapacity Until RepaidAcknowledged

The report gives no description here.

MediumDebt With Zero Collateral Is UnliquidateableAcknowledged

The report gives no description here.

MediumDoS To Keeper TransactionsAcknowledged

The report gives no description here.

MediumInadequate Estimated Liquidation CostsAcknowledged

The report gives no description here.

MediumLiquidation Fees Not Covered By non-sUSD CollateralAcknowledged

The report gives no description here.

MediumNegative New Margin Is Not RecognizedAcknowledged

The report gives no description here.

Show 10 more

MediumOrders Can Be Censored By Front-runningAcknowledged

The report gives no description here.

MediumPending Fees Altered By setMarketConfigurationAcknowledged

The report gives no description here.

MediumReward Distributor Is Not Future-ProofAcknowledged

The report gives no description here.

MediumUnexpected Liquidations Caused By Block.basefeeAcknowledged

The report gives no description here.

MediumUtilization Fees Are Not Accurate To Liquidity UpdatesAcknowledged

The report gives no description here.

MediumValue Extraction Via Trustless KeepersAcknowledged

The report gives no description here.

LowImmediately Cancelable Orders Are PermittedAcknowledged

The report gives no description here.

LowmergeAccounts Used To Steal A User’s PositionAcknowledged

The report gives no description here.

LowReported Debt Stepwise Jump RisksAcknowledged

The report gives no description here.

LowSettlement Hook Executions Not ValidatedAcknowledged

The report gives no description here.

Show 2 more

LowsUSD Collateral maxAllowable Can Be ExceededAcknowledged

The report gives no description here.

LowUnused FlagAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Synthetix’s security record

Synthetix

Audits13 audits by 1 firmLast audit Dec 2025, by Guardian Audits.

Critical findings3 criticals acknowledged, not fixedReported in “Synthetix Treasury Market” by Guardian Audits, Feb 2025. The team acknowledged all 3.

Open Synthetix’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.