GMX GLV

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX GLV) on 3 Sep 2024: 46 findings, 1 critical; 32 marked fixed, 14 acknowledged.

1 critical finding, fixed
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings46

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium039
Low01120
MediumGLV Oracle Count Wrong For Homogenous MarketsAcknowledged

The report gives no description here.

MediumGLV Used To Exit Illiquid MarketsAcknowledged

The report gives no description here.

MediumVirtual Inventory Ignored On WithdrawalAcknowledged

The report gives no description here.

LowAttacker can extract value from shiftsAcknowledged

The report gives no description here.

LowDoS Via Type CastingAcknowledged

The report gives no description here.

LowGLV Deposit Creation DoSAcknowledged

The report gives no description here.

LowGLV Salt Lookup Not ClearedAcknowledged

The report gives no description here.

LowGM Deposits With False isMarketTokenDepositAcknowledged

The report gives no description here.

LowNo Keeper Incentives To Create ShiftsAcknowledged

The report gives no description here.

LowShifting Is Allowed To Same MarketAcknowledged

The report gives no description here.

Show 4 more
LowUnused Struct ParamsAcknowledged

The report gives no description here.

LowUsers can imbalance glv to reduce glv yieldAcknowledged

The report gives no description here.

LowUsers Charged For Oracles On CancelAcknowledged

The report gives no description here.

LowWithdrawal/Shift count reserved GM as availableAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us