Synthetix TLX V2
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed Synthetix (Synthetix TLX V2) on 1 Mar 2025: 65 findings, 1 critical; 21 marked fixed, 42 acknowledged, 2 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings65
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 2 |
| Medium | 1 | 10 | 4 |
| Low | 1 | 31 | 14 |
HighRebalance Extractable ValueAcknowledged
The report gives no description here.
MediumDecaying Redemption Fee ManipulationAcknowledged
The report gives no description here.
MediumDepositing Minimum Amount Leads To Position ClosureAcknowledged
The report gives no description here.
MediumLast User Cannot Fully Redeem If LT Position Is Still OpenAcknowledged
The report gives no description here.
MediumLeverage Mismatch Because Different Price SourcesAcknowledged
The report gives no description here.
MediumLeveragedTokens Pay Disproportionately Higher Streaming FeesAcknowledged
The report gives no description here.
MediumMissing Execute Order FunctionAcknowledged
The report gives no description here.
MediumOnly Current Mint Amount ValidatedAcknowledged
The report gives no description here.
MediumOrder Fees Do Not Include Rebalance CostsAcknowledged
The report gives no description here.
MediumStreaming Fee Starts Too LateAcknowledged
The report gives no description here.
Show 10 more
MediumTokens Are Tradable When The LT Is LiquidatableAcknowledged
The report gives no description here.
Low_addressProvider Initialized TwiceAcknowledged
The report gives no description here.
Low_redeemLeveragedToken Return Value Not UsedAcknowledged
The report gives no description here.
Low_validateMintAmount Over/Underestimate Position SizeAcknowledged
The report gives no description here.
LowAdresses Can Not Be Unfrozen In AddressProvider ContractAcknowledged
The report gives no description here.
LowcanRebalance Does Not Check Market LimitsAcknowledged
The report gives no description here.
LowCentralization RiskAcknowledged
The report gives no description here.
LowCharging Wrong Redemption FeeAcknowledged
The report gives no description here.
LowDelayed Offchain Order May Become UnexecutableAcknowledged
The report gives no description here.
LowDoS On High UsageAcknowledged
The report gives no description here.
Show 10 more
LowFee Calculations Are Rounded DownAcknowledged
The report gives no description here.
LowFreezing Address Not Yet SetAcknowledged
The report gives no description here.
LowHigh Rebalance Threshold Causes Funds To Become LockedAcknowledged
The report gives no description here.
LowisActive() SemanticsAcknowledged
The report gives no description here.
LowLack Of Storage Gaps In TlxOwnableUpgradeableAcknowledged
The report gives no description here.
LowLeveragedToken Can Be ReactivatedAcknowledged
The report gives no description here.
LowLTs Could Be Forced To Remain Outside Exact Target LeverageAcknowledged
The report gives no description here.
LowMissing Check If targetLeverage = 1e18Acknowledged
The report gives no description here.
LowMissing Force Rebalance FunctionalityAcknowledged
The report gives no description here.
LowMissing Minimum Amount ChecksAcknowledged
The report gives no description here.
Show 10 more
LowPossible Full Position DoS Due To Streaming FeeAcknowledged
The report gives no description here.
LowPrecision Loss In _getLeverageUpdateSizeDelta FunctionAcknowledged
The report gives no description here.
LowPyth Price Confidence Interval Is Ignored In PerpsV2Acknowledged
The report gives no description here.
LowRedemption Fee BoundsAcknowledged
The report gives no description here.
LowReferral System Is Not ImplementedAcknowledged
The report gives no description here.
LowRemaining Margin Can Be 0Acknowledged
The report gives no description here.
LowTemporary DoS Due To Price DivergenceAcknowledged
The report gives no description here.
LowUnnecessary Price Impact ChargedAcknowledged
The report gives no description here.
LowUsers Can Redeem While The Contract Is PausedAcknowledged
The report gives no description here.
LowVault Could Be Drained By Cancellation FeesAcknowledged
The report gives no description here.
Show 2 more
LowWrong Emission Of MintedAmountIncreased EventAcknowledged
The report gives no description here.
LowZero Returns On Stale PricesAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Synthetix’s security record
SynthetixSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us