Synthetix BFP 2
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed Synthetix (Synthetix BFP 2) on 3 Mar 2025: 49 findings, 2 critical; 27 marked fixed, 22 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings49
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 2 | 8 |
| Medium | 0 | 14 | 5 |
| Low | 0 | 6 | 12 |
CriticalmergeAccount Abused For ProfitFixed
The report gives no description here.
CriticalProfitable Self LiquidationsFixed
The report gives no description here.
HighAccounts Can Be Liquidated Upon Order SettlementFixed
The report gives no description here.
HighDebtCorrection Uses Incorrect Price For FundingFixed
The report gives no description here.
HighDoS Via validateMinimumCreditFixed
The report gives no description here.
HighIM Validation Incorrectly Attributes Price ImpactFixed
The report gives no description here.
HighLarge Orders Can Exceed minimumCreditFixed
The report gives no description here.
HighLiquidity Providers Can Control MarketsFixed
The report gives no description here.
HighPnL Wiped Out On Breaking EvenFixed
The report gives no description here.
HighSplit Order May Be Used To Liquidate AccountsFixed
The report gives no description here.
Show 10 more
MediumAccount Can Be Made Liquidatable By CancellingFixed
The report gives no description here.
MediumLiquidation Prevented By Zero Vault DelegationFixed
The report gives no description here.
MediumpayDebt Affects Utilization Without UpdateFixed
The report gives no description here.
MediumRisk Free Trades Via Pay DebtFixed
The report gives no description here.
MediumSetting SkewScale Disrupts MarketsFixed
The report gives no description here.
LowgetHealthData Divide By Zero RevertFixed
The report gives no description here.
LowLacking Distributor Configuration Safety ValidationsFixed
The report gives no description here.
LowLacking Margin Configuration Safety ValidationsFixed
The report gives no description here.
LowLiquidation Rewards Are Not Bounded By The MinimumFixed
The report gives no description here.
LowMargin Requirements Do Not Use The Max FeeFixed
The report gives no description here.
Show 7 more
LowRedundant Funding Velocity ComputationsFixed
The report gives no description here.
LowSettlement And Cancellation Fees Lack Fixed MarginFixed
The report gives no description here.
LowSettlement Hooks May Be RepeatedFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowUnnecessary newSupportedCollaterals ArrayFixed
The report gives no description here.
LowUnused Mm ParameterFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Synthetix’s security record
SynthetixSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us