GMX Buyback Updates

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Buyback Updates) on 16 Oct 2024: 22 findings, 1 critical; 11 marked fixed, 11 acknowledged.

1 critical finding, fixed
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High003
Medium021
Low096
CriticalNecessary Handler Statuses Are Not SetFixed

The report gives no description here.

HighAccount Transfers Abused To Invalidate VestingFixed

The report gives no description here.

HighIncorrect Vesting Validation On Account TransferFixed

The report gives no description here.

HighOld Reward Router Cannot Be DisabledFixed

The report gives no description here.

MediumUse Of DelegateCall Within A For Loop In A PayableFixed

The report gives no description here.

Low_restakeBnGmx Ignores RewardRouterV2Fixed

The report gives no description here.

LowMissing nonReentrant ModifierFixed

The report gives no description here.

LowMultiple Operations Require An UnintendedFixed

The report gives no description here.

LowUnused VariableFixed

The report gives no description here.

LowUsers Cannot Unstake Until Re-stakedFixed

The report gives no description here.

Show 1 more
LowvalidateReceiver Is Missing Checks On TheFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us