GMX Updates 1

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Updates 1) on 14 Jun 2024: 45 findings, 3 critical; 24 marked fixed, 20 acknowledged, 1 open.

3 critical findings, fixed
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings45

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical003
High117
Medium063
Low01311
CriticalAutoCancellation Prevents LiquidationsFixed

The report gives no description here.

CriticalExternal Call Gas Adjustment DoS’s LiquidationsFixed

The report gives no description here.

CriticalshiftGasLimitKey Returns Incorrect Gas Limit KeyFixed

The report gives no description here.

HighAtomic Providers Cannot Be ConfiguredFixed

The report gives no description here.

HighAtomic Withdrawal Feature UnsableFixed

The report gives no description here.

HighBorrowing Fees Increase Based On Incorrect RateFixed

The report gives no description here.

HighCant set data stream through configFixed

The report gives no description here.

HighGas Validation Does Not Account For Callback GasFixed

The report gives no description here.

HighGMOracleProvider Reverts Due To Incorrect ValidationFixed

The report gives no description here.

HighUsers Can Use Shift To Avoid Deposit FeesFixed

The report gives no description here.

Show 10 more
MediumDangerous Atomic Withdrawal Invocation PatternFixed

The report gives no description here.

MediumShifts Within A Virtual Inventory Unfairly PunishedFixed

The report gives no description here.

MediumuiFee is Taken Twice During ShiftFixed

The report gives no description here.

LowGM Oracle Salt OptimizationFixed

The report gives no description here.

LowKink Borrowing Yields Unexpected RateFixed

The report gives no description here.

LowLacking Configuration ValidationsFixed

The report gives no description here.

LowLongs Pay Higher Borrowing Fees As Price IncreasesFixed

The report gives no description here.

LowMarket Orders Can be Added to AutoCancel ListFixed

The report gives no description here.

LowOutdated NatSpecFixed

The report gives no description here.

LowRedundant priceFeed ChecksFixed

The report gives no description here.

Show 4 more
LowShifts Are Allowed In The Same MarketFixed

The report gives no description here.

LowTimestamp Adjustments DoS Atomic WithdrawalsFixed

The report gives no description here.

LowUnused ErrorsFixed

The report gives no description here.

LowUse Of Lagging validFromTimestampFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us