GMX Gasless

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Gasless) on 27 Feb 2025: 27 findings, 0 critical; 15 marked fixed, 12 acknowledged.

No open critical findings
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings27

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High005
Medium022
Low0108
HighAtomic Swaps With Normal FeesFixed

The report gives no description here.

HighcallbackContract Siphons RefundsFixed

The report gives no description here.

HighLacking Cancellation Receiver ValidationFixed

The report gives no description here.

HighMissing decreasePositionSwapType ValidationFixed

The report gives no description here.

HighMissing Update Order Fee LogicFixed

The report gives no description here.

MediumremoveSubaccount Cannot Be GaslessFixed

The report gives no description here.

MediumUnused Permit DoSFixed

The report gives no description here.

LowDuplicated orderKey EventsFixed

The report gives no description here.

LowLacking Feature ValidationFixed

The report gives no description here.

LowMissing MaxFee Validation For RelayerFixed

The report gives no description here.

Show 5 more
LowMissing Swap Path ValidationFixed

The report gives no description here.

LowPermit FrontrunningFixed

The report gives no description here.

LowremoveSubaccount Marked As PayableFixed

The report gives no description here.

LowUnnecessary Wnt Transfers To/From OrderVaultFixed

The report gives no description here.

LowUnused EnumFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us