Synthetix Update PR Reviews

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed Synthetix (Synthetix Update PR Reviews) on 1 Dec 2025: 29 findings, 2 critical; 8 marked fixed, 20 acknowledged, 1 open.

2 critical findings, fixed
Open the reportOpen Synthetix’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings29

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High004
Medium1111
Low091
MediumAuthorized Trader Role Not GrantedAcknowledged

The report gives no description here.

MediumInconsistent Deploy and Post-deploymentAcknowledged

The report gives no description here.

MediumMissing MANAGER_ROLE GrantAcknowledged

The report gives no description here.

MediumMissing MANAGER/AUTHORIZED Role HandlingAcknowledged

The report gives no description here.

MediumNo Readiness Checks Before ExecuteAcknowledged

The report gives no description here.

MediumOperational Roles Default to TimelockControllerAcknowledged

The report gives no description here.

MediumPending Withdrawal Liabilities Ignored in NAVAcknowledged

The report gives no description here.

MediumReward Sniping via Step-Wise Jump DistributionAcknowledged

The report gives no description here.

MediumRole Defaults Lead To RevertAcknowledged

The report gives no description here.

MediumStale Fixed Withdrawal Amount Causes NAV GamingAcknowledged

The report gives no description here.

Show 10 more
MediumVerification Omits Critical StateAcknowledged

The report gives no description here.

LowContract Balance Check Does Not Consider PendingAcknowledged

The report gives no description here.

LowDeposit Path Lacks SlippageAcknowledged

The report gives no description here.

LowDisputed Withdrawal Requests Never Auto-ExpireAcknowledged

The report gives no description here.

LowFirst Depositor Prevention ImprovementsAcknowledged

The report gives no description here.

LowmaxWithdraw Ignores Reserved SharesAcknowledged

The report gives no description here.

LowRelation Between Burnt and Output Not EnforcedAcknowledged

The report gives no description here.

LowReward Debt Can Be Scaled To Higher DecimalAcknowledged

The report gives no description here.

LowRounding in addRewards Leaves USDT DustAcknowledged

The report gives no description here.

LowUser Can Flood The Withdrawal QueueAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Synthetix’s security record

Synthetix
Audits13 audits by 1 firmLast audit Dec 2025, by Guardian Audits.
Critical findings3 criticals acknowledged, not fixedReported in “Synthetix Treasury Market” by Guardian Audits, Feb 2025. The team acknowledged all 3.
Open Synthetix’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us