GMX GLV
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed GMX (GMX GLV) on 3 Sep 2024: 46 findings, 1 critical; 32 marked fixed, 14 acknowledged.
Findings46
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 3 | 9 |
| Low | 0 | 11 | 20 |
CriticalGLV Arbitraged With pnlToPoolFactorFixed
The report gives no description here.
HighExecution fee locked in router on cancellationFixed
The report gives no description here.
HighGLV Callbacks Do Not Validate Remaining GasFixed
The report gives no description here.
MediumExcess execution fee will be requiredFixed
The report gives no description here.
MediumexecutionFee Should Be UpdatedFixed
The report gives no description here.
MediumGLV Actions Cannot Be SimulatedFixed
The report gives no description here.
MediumGLV Read-only Reentrancy RiskFixed
The report gives no description here.
MediumGLV Trapped Funds Upon DisabledFixed
The report gives no description here.
MediumGLV Used For Atomic WithdrawalsFixed
The report gives no description here.
MediumGLV Withdrawal Callback Gas Cost IgnoredFixed
The report gives no description here.
Show 10 more
MediumInsufficient Gas Forwarded For RefundFixed
The report gives no description here.
MediumUser GLV Deposits Errantly MaximizedFixed
The report gives no description here.
Lowblock.timestamp UsageFixed
The report gives no description here.
LowCancelling Deposits Unnecessarily Transfers TokensFixed
The report gives no description here.
LowDeposits With Zero Short Token FailFixed
The report gives no description here.
LowErrant GLV KeysFixed
The report gives no description here.
LowExecution Fees Increased By Empty MarketsFixed
The report gives no description here.
LowFeature validation occurs before try-catchFixed
The report gives no description here.
LowFunds Are Not Synced In The GLV VaultFixed
The report gives no description here.
LowGLV Deposit Config Added TwiceFixed
The report gives no description here.
Show 10 more
LowGLV Deposits Incorrectly Value FeesFixed
The report gives no description here.
LowGLV GM Balance Validation Minimizes ValueFixed
The report gives no description here.
LowIncorrect Param Used in EventFixed
The report gives no description here.
LowLacking GlobalNonReentrant ModifierFixed
The report gives no description here.
LowLacking GM Market Count CapFixed
The report gives no description here.
LowMalicious Code Can Be Set In Token Name/SymbolFixed
The report gives no description here.
LowMisleading setMarketTokenAmount FunctionFixed
The report gives no description here.
LowMissing function for feature keyFixed
The report gives no description here.
LowSuperfluous ImportsFixed
The report gives no description here.
LowSuperfluous receivedUsd ValueFixed
The report gives no description here.
Show 2 more
LowUnused errorsFixed
The report gives no description here.
LowUnused marketCount VariableFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of GMX’s security record
GMXSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us