MUX Perps

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Guardian Audits reviewed MUX (MUX Perps) on 6 Feb 2025: 76 findings, 1 critical; 41 marked fixed, 33 acknowledged, 2 open.

1 critical finding, fixed
Open the reportOpen MUX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings76

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High009
Medium1167
Low11724
CriticalInflation Attack Steals First DepositFixed

The report gives no description here.

HighDelegators Cannot Cancel All OrdersFixed

The report gives no description here.

HighIncorrect reservedUsd Logic For ShortsFixed

The report gives no description here.

HighLiquidity Providers Can Abuse Unrealized Gains To Push Pool Utilization Over One HundredFixed

The report gives no description here.

HighLiquidity Providers Can Withdraw Right AwayFixed

The report gives no description here.

HighMulti-market Liquidations May FailFixed

The report gives no description here.

HighoneRound Function Potentially Allows Negative AllocationsFixed

The report gives no description here.

HighPossible DoS Vector In The Delegate FunctionFixed

The report gives no description here.

HighPrice Query Failure Due To Transient Storage In PricingManagerFixed

The report gives no description here.

HighUnauthorized Position CreationFixed

The report gives no description here.

Show 10 more
MediumBroker Can Abuse oracleSigner SignaturesFixed

The report gives no description here.

MediumEmpty Collateral Can Be ActivatedFixed

The report gives no description here.

MediumImprecise PnL In realizeProfitFixed

The report gives no description here.

MediumSignature Replay In MuxPriceProvider ContractFixed

The report gives no description here.

MediumWithdrawUsd May Try To Withdraw 0Fixed

The report gives no description here.

MediumWrong Pause Check For LiquidationsFixed

The report gives no description here.

MediumZero Balance Active CollateralsFixed

The report gives no description here.

LowaddLiquidity Revert Due To Divide By 0Fixed

The report gives no description here.

LowBorrowing Rate Loses PrecisionFixed

The report gives no description here.

LowCollateral Can Be Added To 0 AddressFixed

The report gives no description here.

Show 10 more
LowConditional Token CheckFixed

The report gives no description here.

LowDirect Delete Of EnumerableSetUpgradeable.UintSet Struct In _cancelActivatedTpslOrders FunctionFixed

The report gives no description here.

LowIncorrect Comment In ChainlinkStreamProviderFixed

The report gives no description here.

LowIncorrect Event Data In donateLiquidityFixed

The report gives no description here.

LowIncorrect View Functions In CollateralPoolFixed

The report gives no description here.

LowLack Of A Double Step TransferOwnership PatternFixed

The report gives no description here.

LowLiquidity Can Be Still Added To Pools On IsDraining StateFixed

The report gives no description here.

LowMissing ReentrancyGuard InitializationFixed

The report gives no description here.

LowMissing Withdraw Function In ChainlinkStreamProviderFixed

The report gives no description here.

LowRebalance Orders Cannot Be CanceledFixed

The report gives no description here.

Show 10 more
LowRedundant FunctionFixed

The report gives no description here.

LowSome Orders Cannot Be PausedFixed

The report gives no description here.

LowSome Transactions Update The Sequence TwiceFixed

The report gives no description here.

LowTypoFixed

The report gives no description here.

LowUnexpected Fill Price When Trigger OpenFixed

The report gives no description here.

LowUnnecessary Check In _traderTotalUpnlUsdFixed

The report gives no description here.

LowUnused Internal FunctionsFixed

The report gives no description here.

LowWarning About isWithdrawAllFixed

The report gives no description here.

LowWithdrawal Slippage May Exceed 100%Fixed

The report gives no description here.

LowWithdrawals Fail If Path Is Not SetFixed

The report gives no description here.

Show 1 more
LowwrapNative Should Not Be Called DirectlyFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of MUX’s security record

MUX
Audits3 audits by 2 firmsLast audit Feb 2025, by Guardian Audits.
Critical findingsNo open critical findingsAcross the 3 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open MUX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us