Synthetix SNX Vaults
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed Synthetix (Synthetix SNX Vaults) on 2 May 2025: 49 findings, 2 critical; 25 marked fixed, 24 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings49
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 2 | 3 |
| Medium | 0 | 7 | 6 |
| Low | 0 | 15 | 14 |
CriticalMismatch in the redemption mechanismFixed
The report gives no description here.
CriticalUnrestricted Flash Loan CallbackFixed
The report gives no description here.
High_performanceFeeHighWaterMark Is IncorrectlyFixed
The report gives no description here.
HighFee-on-fee Calculation Inflates Vault FeesFixed
The report gives no description here.
HighRealized PNL Breaks Delta NeutralityFixed
The report gives no description here.
MediumIncorrect Fee-on-Fee Calculation In totalAssetsFixed
The report gives no description here.
MediumMissing Initialization of ERC20PermitUpgradeableFixed
The report gives no description here.
MediumMissing Proper Slippage ChecksFixed
The report gives no description here.
MediumPotential DoS via Unexpected ETHFixed
The report gives no description here.
MediumPotential Underflow in totalAssets FunctionFixed
The report gives no description here.
Show 10 more
MediumRepeated Tiny DepositsFixed
The report gives no description here.
LowDebt Can Be Artificially InflatedFixed
The report gives no description here.
LowDeposits May RevertFixed
The report gives no description here.
LowmaxRedeem Function IgnoresFixed
The report gives no description here.
LowMisleading ErrorFixed
The report gives no description here.
LowMissing EIP2612 ImplementationFixed
The report gives no description here.
LowMissing Fee Setting ConstraintsFixed
The report gives no description here.
LowModifiedPosition event emits wrong referrerFixed
The report gives no description here.
LowOvercollected Redemption Fee Due To Price ImpactFixed
The report gives no description here.
LowPrecision Loss in Redemption CalculationFixed
The report gives no description here.
Show 5 more
LowTypoFixed
The report gives no description here.
LowUnnecessary ERC2771 CheckFixed
The report gives no description here.
LowUnnecessary Zero-Fee TransfersFixed
The report gives no description here.
LowUnset Referrer FieldFixed
The report gives no description here.
LowVault Is More Exposed To LiquidationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Synthetix’s security record
SynthetixSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us