Synthetix Treasury Updates

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed Synthetix (Synthetix Treasury Updates) on 17 Apr 2025: 15 findings, 0 critical; all acknowledged, none fixed.

No open critical findings
Open the reportOpen Synthetix’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High020
Medium020
Low0110
HighAnyone can loop saddle-unsaddle and drainAcknowledged

The report gives no description here.

HighLiquidated collateral is credited twiceAcknowledged

The report gives no description here.

MediumburnUsd locks the available collateralAcknowledged

The report gives no description here.

MediumReward token removal can be abused for potentialAcknowledged

The report gives no description here.

Low_decimalPow() supports only 18 decimals precisionAcknowledged

The report gives no description here.

LowAnyone can DoSAcknowledged

The report gives no description here.

LowApprovals are not resetAcknowledged

The report gives no description here.

LowDelegation in liquidateToTreasury lacks checksAcknowledged

The report gives no description here.

LowMisplaced Comment in LiquidationModule.solAcknowledged

The report gives no description here.

LowPrecision Revert in withdrawMarketCollateralAcknowledged

The report gives no description here.

Show 5 more
LowThe oracleManager should properly adjust decimalsAcknowledged

The report gives no description here.

LowThe pool loaded in liquidateToTreasury is notAcknowledged

The report gives no description here.

LowThe treasuryAccountId is not checked for existenceAcknowledged

The report gives no description here.

LowUnclaimed rewards are likely lost whenAcknowledged

The report gives no description here.

LowUnsaddle may be blocked because of rewardsAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Synthetix’s security record

Synthetix
Audits13 audits by 1 firmLast audit Dec 2025, by Guardian Audits.
Critical findings3 criticals acknowledged, not fixedReported in “Synthetix Treasury Market” by Guardian Audits, Feb 2025. The team acknowledged all 3.
Open Synthetix’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us