Gensyn security record
As of 9 Nov 2026, Gensyn has 7 audit reports by 1 security firm on Trustblock; the latest is by Trail of Bits, dated 17 Sep 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits7
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Gensyn Token Minting Cap | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Gensyn, Delphi LMSR Markets with Automated Settlem | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Gensyn Automated Settlement and Permit | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Gensyn - Delphi Dynamic Parimutuel Markets | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Bridged Gensyn Token | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Gensyn Buyback-and-Burn Vault | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Gensyn ERC-20 Token | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings17
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 7 | 0 | 2 |
HighFailed and expired markets can liquidate shares above their purchase costGensyn, Delphi LMSR Markets with Automated Settlem · Trail of Bits · 17 Sep 2026Open
The report gives no description here.
Open the reportLowThe bridged token deployment script hard-codes one Safe address as the sole timelock proposer on every chain ConfigurationGensyn Token Minting Cap · Trail of Bits · 17 Sep 2026Open
The report gives no description here.
Open the reportLowIn-flight markets are stranded when the gateway oracle relayer is unset or rotated mid-flightGensyn Automated Settlement and Permit · Trail of Bits · 14 Jul 2026Open
The report gives no description here.
Open the reportLowPermissionless market creators can send untrusted metadata references to the Truebit backendGensyn Automated Settlement and Permit · Trail of Bits · 14 Jul 2026Open
The report gives no description here.
Open the reportLowGateway initialization can be front-run to install a malicious factory Access ControlsGensyn - Delphi Dynamic Parimutuel Markets · Trail of Bits · 21 Apr 2026Open
The report gives no description here.
Open the reportLowApproved path pools are not validated against the Uniswap V3 factory Data ValidationGensyn Buyback-and-Burn Vault · Trail of Bits · 13 Apr 2026Open
The report gives no description here.
Open the reportLowChanging aiToken silently invalidates all approved paths and leaves stale path state Data ValidationGensyn Buyback-and-Burn Vault · Trail of Bits · 13 Apr 2026Open
The report gives no description here.
Open the reportLowETH and WETH epoch volume limits are tracked independently, allowing double the intended volume Data ValidationGensyn Buyback-and-Burn Vault · Trail of Bits · 13 Apr 2026Open
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gensyn"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us