GMX Crosschain V2.2 3 Report
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed GMX (GMX Crosschain V2.2 3 Report) on 26 Jul 2025: 70 findings, 3 critical; 42 marked fixed, 28 acknowledged.
Findings70
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 6 |
| Medium | 0 | 4 | 9 |
| Low | 0 | 24 | 24 |
MediumGas Limits UnderestimatedAcknowledged
The report gives no description here.
MediumInaccurate LiquidationsAcknowledged
The report gives no description here.
MediumReferrals Controlled For Smart Contract TradersAcknowledged
The report gives no description here.
MediumSubaccounts May Divert Multichain FundsAcknowledged
The report gives no description here.
LowAsymmetric CappingAcknowledged
The report gives no description here.
LowbridgeIn Is Marked As PayableAcknowledged
The report gives no description here.
LowDangerous Timelock Admin AssignmentAcknowledged
The report gives no description here.
LowExternal Call Gas Is Not CorrectedAcknowledged
The report gives no description here.
LowFunctions Cannot Be Used With MulticallAcknowledged
The report gives no description here.
LowImpact Distributions For Pending ImpactAcknowledged
The report gives no description here.
Show 10 more
LowInaccurate executionPrice EmittedAcknowledged
The report gives no description here.
LowInconsistent Handler AddressesAcknowledged
The report gives no description here.
LowKeepers May Censor Actions Using BridgeOutAcknowledged
The report gives no description here.
LowLacking Collateral Factor ValidationsAcknowledged
The report gives no description here.
LowLacking Default Admin RulesAcknowledged
The report gives no description here.
LowLacking Stargate Fee ProtectionAcknowledged
The report gives no description here.
LowLayerZero ConfigurationAcknowledged
The report gives no description here.
LowLendable Amt May Not Belong To PoolAcknowledged
The report gives no description here.
LowMessagingReceipt Not ReturnedAcknowledged
The report gives no description here.
LowMissing isSrcChainIdEnabled CheckAcknowledged
The report gives no description here.
Show 8 more
LowModifier Gas Not Accounted ForAcknowledged
The report gives no description here.
LowOutdated TimelockController UsedAcknowledged
The report gives no description here.
LowPotential Feed ID Collision Due To TruncationAcknowledged
The report gives no description here.
LowPrice Impact Factors Should Be AdjustedAcknowledged
The report gives no description here.
LowPrice Impact GriefingAcknowledged
The report gives no description here.
LowPrice Impact Not GuaranteedAcknowledged
The report gives no description here.
LowStargate Quote InaccuraciesAcknowledged
The report gives no description here.
LowUnnecessary referralStorage VariableAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of GMX’s security record
GMXSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us