GMX Synthetics Updates

Guardian Audits3 Nov 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Synthetics Updates) on 3 Nov 2025: 23 findings, 0 critical; 5 marked fixed, 18 acknowledged.

No open critical findings

Open the report Open GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings23

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	4	0
Low	0	14	3

MediumFunding Fees Are Incorrectly DistributedAcknowledged

The report gives no description here.

MediumLongs Incorrectly Share Borrowing FeesAcknowledged

The report gives no description here.

MediumPosition Health Changed On UpgradeAcknowledged

The report gives no description here.

MediumPositions May Be Prevented From ClosingAcknowledged

The report gives no description here.

LowDangerous OI In Tokens Base KeyAcknowledged

The report gives no description here.

LowFunding Is Charged Inaccurately RetroactivelyAcknowledged

The report gives no description here.

LowLacking OI Notional CapsAcknowledged

The report gives no description here.

LowLikely Impact Pool DearthAcknowledged

The report gives no description here.

LowMaxCollateralSum Decrease DoSAcknowledged

The report gives no description here.

LowNegative Price Impact Capped On CostAcknowledged

The report gives no description here.

Show 8 more

LowOne Way Migration Process WarningAcknowledged

The report gives no description here.

LoworacleProviderUpdatedAt Ineffective ValidationAcknowledged

The report gives no description here.

LowPositive Price Impact Capped On CostAcknowledged

The report gives no description here.

LowPrice Impact Pool Gaming RiskAcknowledged

The report gives no description here.

LowSaved Funding Factor Rate ResetAcknowledged

The report gives no description here.

LowStepwise Pool Value ChangesAcknowledged

The report gives no description here.

LowVirtual Inventory Keys Are Allowed Base KeysAcknowledged

The report gives no description here.

LowVirtual Inventory Migration RisksAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX

Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.

Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.

Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.