Synthetix SNX Vaults
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed Synthetix (Synthetix SNX Vaults) on 2 May 2025: 49 findings, 2 critical; 25 marked fixed, 24 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings49
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 2 | 3 |
| Medium | 0 | 7 | 6 |
| Low | 0 | 15 | 14 |
HighDeposits Might Change Funding Rate DirectionAcknowledged
The report gives no description here.
HighIncorrect Order Slippage CheckAcknowledged
The report gives no description here.
MediumExcessive Swap Amounts Risk FailingAcknowledged
The report gives no description here.
MediumIncorrect Accounting Due To _realizeProfit CallAcknowledged
The report gives no description here.
MediumLeftover SNX_USD are stuck in the contratAcknowledged
The report gives no description here.
MediumLosses Perturb Delta NeutralityAcknowledged
The report gives no description here.
MediumPnL Realization Depends On Vault ActivityAcknowledged
The report gives no description here.
MediumRedeem Fail When Very Low Total DepositsAcknowledged
The report gives no description here.
MediumSlippage in Swaps Can Prevent Flash LoanAcknowledged
The report gives no description here.
LowAdmin Should Call rebalance FrequentlyAcknowledged
The report gives no description here.
Show 10 more
LowCache Total Fee AmountAcknowledged
The report gives no description here.
LowETH received via receive() can be lockedAcknowledged
The report gives no description here.
LowExcessive Gas Usage in Deposit FlowAcknowledged
The report gives no description here.
LowFlashloan Fee Is Not AccountedAcknowledged
The report gives no description here.
LowIncorrect Total Assets Cap CheckAcknowledged
The report gives no description here.
LowIneffective Swap DeadlineAcknowledged
The report gives no description here.
LowLack Of a Double Step Transfer Ownership PatternAcknowledged
The report gives no description here.
LowLack Of ERC4626 View FunctionsAcknowledged
The report gives no description here.
LowLast User Can Not Fully RedeemAcknowledged
The report gives no description here.
LowMissing Max. Open Interest ChecksAcknowledged
The report gives no description here.
Show 4 more
LowOrder Cancelation Exposes Vault To MarketAcknowledged
The report gives no description here.
LowRebalance Calls Can Fail withAcknowledged
The report gives no description here.
LowRedemption Failure Due To Aave StateAcknowledged
The report gives no description here.
LowTheoretical First-Depositor Inflation AttackAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Synthetix’s security record
SynthetixSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us