GMX Crosschain V2.2 4 Report

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Crosschain V2.2 4 Report) on 26 Jul 2025: 36 findings, 0 critical; 17 marked fixed, 18 acknowledged, 1 open.

No open critical findings
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings36

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High102
Medium096
Low099
HighCross-Chain Nonce Handling And Execution OrderFixed

The report gives no description here.

HighUsers' Multichain Balance Can Be ConsumedFixed

The report gives no description here.

MediumIncorrect positionKey When UpdatingFixed

The report gives no description here.

MediumMax dataList Length Value Too LowFixed

The report gives no description here.

MediumminPositionImpactPoolAmount Change BlockedFixed

The report gives no description here.

MediumPending Impact Prioritized Over Current ImpactFixed

The report gives no description here.

MediumreduceLentAmount Creates ArbitrageFixed

The report gives no description here.

MediumSome Timelock Actions Cannot Be DoneFixed

The report gives no description here.

LowCross-chain Actions Cannot Use GMX Pool LiquidityFixed

The report gives no description here.

LowDocumentation Regarding executionFeeFixed

The report gives no description here.

Show 7 more
LowMisleading Comment In ConstructorFixed

The report gives no description here.

LowMissing Residual Fee RefundsFixed

The report gives no description here.

LowPositive Impact Cap Should Early ReturnFixed

The report gives no description here.

LowreduceLentAmount Rounds Against The ProtocolFixed

The report gives no description here.

LowRedundant Logic In LastSrcChainId UpdateFixed

The report gives no description here.

LowSignatures Might Be ExposedFixed

The report gives no description here.

LowTargetIsNotAContract Error Not UsedFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us