GMX Updates 1
Audit · firm’s term: security review
Part of Guardian Audits’ series
Guardian Audits reviewed GMX (GMX Updates 1) on 14 Jun 2024: 45 findings, 3 critical; 24 marked fixed, 20 acknowledged, 1 open.
Findings45
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 1 | 1 | 7 |
| Medium | 0 | 6 | 3 |
| Low | 0 | 13 | 11 |
HighMigration InconsistenciesAcknowledged
The report gives no description here.
MediumAttack can game price impact at users expenseAcknowledged
The report gives no description here.
MediummakeExternalCalls Unexpected Funds ReceiverAcknowledged
The report gives no description here.
MediumMAX_AUTO_CANCEL_ORDERS Update RiskAcknowledged
The report gives no description here.
MediumMEV Bribes Allow Griefing Of KeepersAcknowledged
The report gives no description here.
MediumRefund gas limit is not accounted forAcknowledged
The report gives no description here.
MediumsetFundingRate Unexpectedly Changes FundingAcknowledged
The report gives no description here.
LowAtomic Withdrawals Cannot Be SimulatedAcknowledged
The report gives no description here.
LowInconsistent naming of function in key contractAcknowledged
The report gives no description here.
LowLacking Deposit And Withdrawal MigrationsAcknowledged
The report gives no description here.
Show 10 more
LowLacking timestampAdjustment ConfigurationsAcknowledged
The report gives no description here.
LowLPs May Avoid Losses With Atomic WithdrawalsAcknowledged
The report gives no description here.
LowMigrating Orders Resets Cancellation CooldownAcknowledged
The report gives no description here.
LowMigration Causes Unexecutable OrdersAcknowledged
The report gives no description here.
LowReference Price Check Bound Is Exceedingly LargeAcknowledged
The report gives no description here.
LowsetPositionImpactDistributionRate Missing ValidationAcknowledged
The report gives no description here.
LowStale Orders Allow For Short Term Risk Free TradesAcknowledged
The report gives no description here.
LowTimestamp Initialization Impacts Existing OrdersAcknowledged
The report gives no description here.
LowusageFactor Can Exceed 100%Acknowledged
The report gives no description here.
LowUsers Can use Shift to Bypass Disabled FeaturesAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of GMX’s security record
GMXSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us