GMX Synthetics

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Part of Guardian Audits’ series

Guardian Audits reviewed GMX (GMX Synthetics) on 11 Jul 2023: 48 findings, 1 critical; 17 marked fixed, 31 acknowledged.

1 critical finding, fixed
Open the reportOpen GMX’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings48

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High021
Medium0115
Low01810
HighKeeper Griefed With orderUpdatedAtBlockAcknowledged

The report gives no description here.

HighwillPositionCollateralBeSufficient Validation BypassedAcknowledged

The report gives no description here.

MediumChainlink Feed ManipulationAcknowledged

The report gives no description here.

MediumCollateral Prioritized Over PnLAcknowledged

The report gives no description here.

MediumgetExecutionGas Needs to Account for Callback GasAcknowledged

The report gives no description here.

MediumInvalid Deposit Price Impact For Homogenous MarketsAcknowledged

The report gives no description here.

MediumIssues With Equity Synthetic TokensAcknowledged

The report gives no description here.

MediumNegative Pool Value DoSAcknowledged

The report gives no description here.

MediumNon-zero Effect On Pool ValueAcknowledged

The report gives no description here.

MediumSaved Callback Keeper GriefingAcknowledged

The report gives no description here.

Show 10 more
MediumShorts Arbitrarily Pay Stable Funding To LongsAcknowledged

The report gives no description here.

MediumUnbounded Virtual Inventory Price ImpactAcknowledged

The report gives no description here.

MediumUnwieldy Claimable Collateral ControlsAcknowledged

The report gives no description here.

LowCheck Odd Gas OptimizationAcknowledged

The report gives no description here.

LowEmpty Event DataAcknowledged

The report gives no description here.

LowEmpty Swap Path For Swap OrdersAcknowledged

The report gives no description here.

LowExchangeRouter Inefficient LoopsAcknowledged

The report gives no description here.

LowFloating Pragma VersionAcknowledged

The report gives no description here.

LowInefficient Price FetchingAcknowledged

The report gives no description here.

LowinitialCollateralDeltaAmount Unexpected AdjustmentAcknowledged

The report gives no description here.

Show 10 more
LowLiquidation FeeAcknowledged

The report gives no description here.

LowMissing NatSpecAcknowledged

The report gives no description here.

LowOracle Block Validation OptimizationsAcknowledged

The report gives no description here.

LowRedundant if CaseAcknowledged

The report gives no description here.

LowRedundant Price FetchingAcknowledged

The report gives no description here.

LowStable Funding Factor Liquidation RiskAcknowledged

The report gives no description here.

LowSuperfluous Price Impact LogicAcknowledged

The report gives no description here.

LowSuperfluous Stack VariableAcknowledged

The report gives no description here.

LowSwap Before Updating Borrowing StateAcknowledged

The report gives no description here.

LowUnnecessary perSizeValues InitializationAcknowledged

The report gives no description here.

Show 1 more
LowUsers Negatively Impacted By Price SpreadAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GMX’s security record

GMX
Audits38 audits by 1 firmLast audit Apr 2026, by Guardian Audits.
Critical findings1 critical acknowledged, not fixedReported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it.
Open GMX’s security record

Security firm

Guardian Audits

15 projects reviewed · 99 reports · latest Aug 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us