Synthetix BFP Market
Audit · firm’s term: security review
Guardian Audits reviewed Synthetix (Synthetix BFP Market) on 18 Apr 2024: 59 findings, 9 critical; 50 marked fixed, 7 acknowledged, 2 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings59
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 9 |
| High | 0 | 1 | 4 |
| Medium | 1 | 2 | 18 |
| Low | 1 | 4 | 19 |
CriticalCollateral Modification Abused To Levy LP FeesFixed
The report gives no description here.
CriticaldebtCorrection Not Updated Upon Realizing To Account MarginFixed
The report gives no description here.
CriticalLPs Can Claim Rewards While Avoiding DebtFixed
The report gives no description here.
CriticalMarket Size Increased Indefinitely With Merge AccountsFixed
The report gives no description here.
CriticalNegative Price Impact Bypassed For Consistent ProfitsFixed
The report gives no description here.
CriticalreportedDebt Incorrectly Calculates FundingFixed
The report gives no description here.
CriticalSplitting Positions Allows fromAccount To Go Below IMFixed
The report gives no description here.
CriticalUser Debt Overwritten When Cancelling OrdersFixed
The report gives no description here.
CriticalUsers Can Withdraw Their Collateral Without Paying DebtFixed
The report gives no description here.
HighLiquidation Computes Utilization Before Updating Market SizeFixed
The report gives no description here.
Show 10 more
HighminimumCredit Backed By Trader sUSD CollateralFixed
The report gives no description here.
HighminimumCredit Reserves Not Validated Upon Position IncreaseFixed
The report gives no description here.
HighsUSD Drained From Vault When Liquidating Margin OnlyFixed
The report gives no description here.
MediumActions May Be Completed When Accounts Are Liquidatable By Margin OnlyFixed
The report gives no description here.
MediumentryPrice Used To Validate Initial MarginFixed
The report gives no description here.
MediumFill Price Causes Funding And Utilization DiscrepancyFixed
The report gives no description here.
MediumflagReward Incorrectly Based On marginUsdFixed
The report gives no description here.
MediumFull Utilization DoSFixed
The report gives no description here.
MediumGas Griefing With Settlement HooksFixed
The report gives no description here.
MediumgetFillPrice And validateLiquidation Revert Due To Division By 0Fixed
The report gives no description here.
Show 10 more
MediumLacking Execution Incentive During Periods Of High Gas FeesFixed
The report gives no description here.
MediumLacking Incentive To Repay DebtFixed
The report gives no description here.
MediumMerging Accounts May Fail For Multicollateral PositionsFixed
The report gives no description here.
MediumNon-Discounted Collateral Used To Validate IMFixed
The report gives no description here.
MediumOrder Cancellation Overcompensates KeepersFixed
The report gives no description here.
MediumRisk Free Trade With Account PermissionsFixed
The report gives no description here.
MediumRisk Free Trade With Merge CallbacksFixed
The report gives no description here.
MediumSmall Positions Accrue Bad Debt In The SystemFixed
The report gives no description here.
MediumSudden Block Fee Increases May Cause Insolvent LiquidationsFixed
The report gives no description here.
MediumUtilization Rate Not Bounded Below 1Fixed
The report gives no description here.
Show 10 more
MediumWrong Feature Flag Used For Account SplitFixed
The report gives no description here.
LowGas Optimization For getCurrentUtilizationRateFixed
The report gives no description here.
LowGas Optimizations For UpdateMarketPreLiquidationFixed
The report gives no description here.
LowgetProportionalFundingElapsed Unnecessarily Performs Integer DivisionFixed
The report gives no description here.
LowIncorrect NatSpecFixed
The report gives no description here.
LowInsolvent Positions DoS getWithdrawableMarginFixed
The report gives no description here.
LowMisleading CommentFixed
The report gives no description here.
LowModify Collateral Permission Too LenientFixed
The report gives no description here.
LowpayDebt Always Deducts From Account MarginFixed
The report gives no description here.
LowPosition Mapping Not Cleared Upon Full SplitFixed
The report gives no description here.
Show 10 more
LowPositions Can Be Liquidated When Adding Collateral PreventedFixed
The report gives no description here.
LowreportedDebt Even Skew OptimizationFixed
The report gives no description here.
LowsupportedSynthMarketIds DoSFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowUnnecessary ApprovalsFixed
The report gives no description here.
LowUnused updatePythPrice FunctionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Synthetix’s security record
SynthetixSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us