GMX security record

Arbitrum, Avalanchegmx.ioX

As of 28 Oct 2026, GMX has 38 audit reports by 1 security firm on Trustblock; the latest is by Guardian Audits, dated 14 Apr 2026. Those reports list 1 critical acknowledged and not fixed.

Critical findings
1 critical acknowledged, not fixed
Reported in “GMX VesterCap Updates” by Guardian Audits, Jul 2024. The team acknowledged it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits38

Newest first

38 audit reports, all in Guardian Audits’ series

AuditSecurity firmDateScopeCritical findingsReport
GMX VesterCap UpdatesSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)1 critical acknowledged, not fixedOpen · GitHub
GMX Updates 1Security firm: Guardian AuditsDate: Scope: Not recorded (see the report)3 critical findings, fixedOpen · GitHub
GMX Updates 2Security firm: Guardian AuditsDate: Scope: Not recorded (see the report)2 critical findings, fixedOpen · GitHub
GMX ConfigSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
GMX GovernanceSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
GMX MigrationSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
GMX UpdatesSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
Chainlink AutomationsSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)2 critical findings, fixedOpen · GitHub
GMX UpdatesSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)1 open critical findingOpen · GitHub
GMX Oracle UpdatesSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
GMX SyntheticsSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
GMX SyntheticsSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)1 critical finding, fixedOpen · GitHub
GMX SyntheticsSecurity firm: Guardian AuditsDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub

Findings521

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical0113
High0532
Medium06066
Low6183155
CriticalAnyone Can Drain Multichain GM Token’s BalanceGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalAnyone Can Drain The Multichain BalanceGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalArbitrary Execution & Balance Drain RiskGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalEdge Oracle Uses Invalid DecimalsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalInconsistent AccountingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalMissing ValidationsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
CriticalNecessary Handler Statuses Are Not SetGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
CriticalGLV Arbitraged With pnlToPoolFactorGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
CriticalLimitSwaps Cannot Execute After Request ExpirationGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
CriticalLiquidations Prevented With updateOrderGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
Show 10 more
CriticalOrders Requiring More Than 5 Million Gas Cannot ExecuteChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
CriticalWithdrawals With Swaps Are IncompatibleChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
CriticalPosition fundingFeeAmountPerSize Errantly ResetGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
HighFunding Is Broken Due To AsymmetryGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed

The report gives no description here.

Open the report
HighVirtual Inventory Does Not Track CorrectlyGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed

The report gives no description here.

Open the report
HighSecondary Amount Is Not Bridged OutGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed

The report gives no description here.

Open the report
HighBridged Withdrawals FailGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighImbalanced Impact Caps Cause Unpayable LentGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighMax Impact Caps Double Count Lent AmountsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighMissing Expo In messageHashGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
HighOverflow DoS In withdrawFromPositionImpactPoolGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighPending Amounts Errantly Capped To ZeroGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighPosition Validated With Atomic OraclesGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighPositive Impact Becomes UnbackedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighPrice Impact Not GuaranteedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighTransfer To EOA Instead Of Multichain BalanceGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighUncapped Positive Impact In Liquidation CheckGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighUnclear Lending ConstraintsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighWrong Token Is Used In bridgeOutFromControllerGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
HighAtomic Swaps With Normal FeesGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
HighcallbackContract Siphons RefundsGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
HighLacking Cancellation Receiver ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
HighMissing decreasePositionSwapType ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
HighMissing Update Order Fee LogicGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
HighAccount Transfers Abused To Invalidate VestingGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
HighIncorrect Vesting Validation On Account TransferGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
HighOld Reward Router Cannot Be DisabledGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
HighvalidFromTime Risk Free TradesGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
HighExecution fee locked in router on cancellationGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
HighGLV Callbacks Do Not Validate Remaining GasGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
Show 10 more
HighKeeper's Not Remunerated For Cancellation CallbackGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
HighUSDC vs USDC.eGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
HighAnyone May performUpkeepChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
HighBorrowing Fees Avoided Due To SkipGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
HighpriceImpactDiffUsd Unclaimable For Adjusted PnLGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumCollateral MismatchGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumComposed Deposit CensoringGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumEarly Validation Allows Inconsistent Market StateGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumImpact Pool Withdrawals Use An Invalid RatioGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumImpossible To Execute Some Timelock ActionsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
MediumIncorrect Atomic Oracle Provider HandlingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Balance Check In bridgeOutGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Gas Utils FunctionGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Position Key UsedGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumIntegration Id Not Validated For Gasless RoutersGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumMalicious Token Gas Griefs KeepersGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumMax Lent Bypassed By Splitting OrdersGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumMissing validateSequencerUpGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumMissing validateSequencerUp In Impact PoolGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumNonce Always IncreasedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
MediumPending Price Impact Can Be LostGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumSame Actions Cannot Be DoneGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumStale Funding State UsedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumSubaccount Action ReplayGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumUnnecessary Relay Fee ChargedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumUntrusted srcChainIdGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumvalidatePosition Might DoS Valid ActionsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Gas EstimationGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
MediumremoveSubaccount Cannot Be GaslessGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
MediumUnused Permit DoSGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
MediumGas Multiplier Fee Key Errantly RemovedGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
MediumOrder Funds May Be Lost Upon CancellationGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
MediumUse Of DelegateCall Within A For Loop In A PayableGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
MediumExcess execution fee will be requiredGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumexecutionFee Should Be UpdatedGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumGLV Actions Cannot Be SimulatedGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumGLV Read-only Reentrancy RiskGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumGLV Trapped Funds Upon DisabledGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumGLV Used For Atomic WithdrawalsGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumGLV Withdrawal Callback Gas Cost IgnoredGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
Show 10 more
MediumInsufficient Gas Forwarded For RefundGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumUser GLV Deposits Errantly MaximizedGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
MediumCallback Gas Validation Ignores 63/64 RuleGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
MediumNo way for user to add cancellation receiverGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
MediumOld Estimated Execution Base Gas Fee UsedGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
MediumOrders Which Close Positions May Be CensoredGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
MediumIncorrect block.timestamp UsedGMX Governance · Guardian Audits · 17 Dec 2023Fixed

The report gives no description here.

Open the report
MediumPayload Attack Enables Griefing Of KeepersGMX Governance · Guardian Audits · 17 Dec 2023Fixed

The report gives no description here.

Open the report
MediumAdditional Ether LostGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
MediumLack of Contract Existence CheckGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
Show 10 more
MediumLack Of safeTransfer For Arbitrary TokenGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
MediumLists With Different LengthsGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
MediumReduced Burn Fee Can Be Larger Than CurrentGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
MediumUser Forced To Deposit Both TokensGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
MediumFeedIds Must Be Set For Every TokenChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
MediumPositive Impact Deposit Not ValidatedGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
MediumVerifier Configuration Risk-Free TradeGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
MediumDecrease Swap Type Not Included In Gas EstimationGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
MediumIncongruent Price ImpactGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
MediumOverwritten Callback ContractGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
Show 10 more
MediumpriceImpactDiffUsd Paid Before priceImpactUsdGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
MediumSubsequent Mints Cause Market Token InflationGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
MediumadjustedPriceImpactDiffAmount MinimizedGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumCapped PnL Leads To Incongruent AccountingGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumFees May Be Errantly Credited To The PoolGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumInaccurate Price Impact FormulaGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumIncongruent Price Impact For Decrease OrdersGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumLiquidation Reverts Due To UnderflowGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumPosition Price Impact Not OffsetGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
MediumRead-only ReentrancyGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
Show 10 more
MediumWrong Impact Pool MaximizationGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowLiquidation Preference HijackedGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed

The report gives no description here.

Open the report
LowMax Price Is Always UsedGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed

The report gives no description here.

Open the report
LowPosition Health Can Decrease On Collateral DepositsGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed

The report gives no description here.

Open the report
LowLacking Domain SeparatorGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed

The report gives no description here.

Open the report
LowLacking From And To ValidationsGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed

The report gives no description here.

Open the report
LowMisleading Account EmittedGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed

The report gives no description here.

Open the report
LowAssumed Shared Decimals Of 6GMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowBridge Out Same Chain Requires Two TransfersGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowBridged Funds Can Be Lost Or TrappedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowBridging Fee Is Paid TwiceGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowBridging Out Tokens From GLV VaultGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowConfig Keeper May Init An Invalid ProviderGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowDuplicated CodeGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowEarly Return Should Include Equality OperatorGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LoweidToSrcChainId Might Not Be DefinedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowFeatures Not Validated During ShiftsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowInability To Bridge Out During ShiftGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowInconsistent ValidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Comparison OperatorGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowIncorrect Gas Tracking For RelayGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowIncorrect recordTransferIn UsageGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Zero Amount Check In recordBridgeInGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowInitialize FrontrunningGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowisSrcChainIdEnabledKey Can Be BypassedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowLacking Error ValidationGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowLent Payback Is Not Rounded UpGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowLiquidation Optimization createLiquidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMarketPoolValueInfo NatSpec WrongGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowmaxLendableFactor ConfigurationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowMisleading Comment For Bridge Out FeeGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMisleading Timelock Transaction SuccessGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing CLAIMABLE_COLLATERAL_DELAY ConfigGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing Feature Flag ValidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing MAX_DATA_LENGTH InitializationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing NatSpec ParamGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing nonReentrant ProtectionGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing Reentrancy GuardsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing SafeguardsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowMissing Validation For bridgeOutFromControllerGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowMisspelled Filenames In Executor ContractsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowModifier Execution OrderGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowOld Orders Can Overwrite Newer OnesGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowOld Orders Can Overwrite Newer OnesGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowPrecision Loss For Token WithdrawalGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowRedundant WithRelayCache StructGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowRisk Free Trade By Causing RevertsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowtransferOut Perturbs Multichain AccountingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnclear Native Deposit BridgeOut ValidationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnexpected Deposit Execution RevertsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowUnexpected Keys Are SettableGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnfavorable Impact Withdrawal RoundingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnintended Reverts With Zero Transfer TokensGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary amountLD Param In recordBridgeInGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary Approval For WNT When BridgingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary srcChainId In bridgeInGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary TernaryGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary toBytes32GMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUntrusted srcChainIdGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowUnused Cache Struct ParamGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowValidate Receiver In batchClaimAffiliateRewardsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed

The report gives no description here.

Open the report
LowAverage Gas Cost Overestimated : calldataLength * 12GMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowImproper Ordering Of oraclePriceCountGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Comment: Calldata Gas EstimationGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Comment: GelatoRelayRouterGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowminPrice Used For maxRelayFeeSwapUsdGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowModifier Execution OrderGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowOver/Under EstimationGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowRelay Params Not InitializedGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowReturn Handling For Order CreationGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowSuperfluous Return StatementGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowSwap Fee, Slippage And Bridge Fee Not Taken Into AccountGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowTrust Assumption Subaccounts: Fee Inflation Risks In Sponsored CallsGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowTrust Assumption Subaccounts: Increase Likelihood Of ArbitrageGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed

The report gives no description here.

Open the report
LowDuplicated orderKey EventsGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowLacking Feature ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing MaxFee Validation For RelayerGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing Swap Path ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowPermit FrontrunningGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowremoveSubaccount Marked As PayableGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowUnnecessary Wnt Transfers To/From OrderVaultGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
LowUnused EnumGMX Gasless · Guardian Audits · 27 Feb 2025Fixed

The report gives no description here.

Open the report
Low_restakeBnGmx Ignores RewardRouterV2GMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowDangerous maxFundingFactorPerSecondGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowInaccurate CommentGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowLiquidation Fee Uses Round Down DivisionGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowMissing nonReentrant ModifierGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowMultiple Operations Require An UnintendedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowNonzero validFrom Allowed For Market OrdersGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowUnused VariableGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowUsers Cannot Unstake Until Re-stakedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowvalidateReceiver Is Missing Checks On TheGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed

The report gives no description here.

Open the report
LowAdditional Allowed KeysGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowDuplicate allUpdateTypes EntriesGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowGeneral Key RiskGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowgetLatestUpdateByType DoSGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowIncorrect previousValue StoredGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowLacking Market ValidationGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
LowMissing Allowed KeysGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed

The report gives no description here.

Open the report
Lowblock.timestamp UsageGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowCancelling Deposits Unnecessarily Transfers TokensGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowDeposits With Zero Short Token FailGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowErrant GLV KeysGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowExecution Fees Increased By Empty MarketsGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowFeature validation occurs before try-catchGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowFunds Are Not Synced In The GLV VaultGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowGLV Deposit Config Added TwiceGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowGLV Deposits Incorrectly Value FeesGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowGLV GM Balance Validation Minimizes ValueGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowIncorrect Param Used in EventGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowLacking GlobalNonReentrant ModifierGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowLacking GM Market Count CapGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowMalicious Code Can Be Set In Token Name/SymbolGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowMisleading setMarketTokenAmount FunctionGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowMissing function for feature keyGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowSuperfluous ImportsGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowSuperfluous receivedUsd ValueGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowUnused errorsGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowUnused marketCount VariableGMX GLV · Guardian Audits · 3 Sep 2024Fixed

The report gives no description here.

Open the report
LowConfig Uses realtimeFeed Instead Of dataStreamGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowInconsistent AutoCancel ValidationGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
LowIncorrect Oracle Price EstimateGMX Updates 2 · Guardian Audits · 14 Jun 2024Fixed

The report gives no description here.

Open the report
LowEarly Return Misses Voting SyncGMX Governance · Guardian Audits · 17 Dec 2023Fixed

The report gives no description here.

Open the report
LowMiniscule proposalThreshold ConfiguredGMX Governance · Guardian Audits · 17 Dec 2023Fixed

The report gives no description here.

Open the report
LowUnnecessary Voting Sync In _stakeGmxGMX Governance · Guardian Audits · 17 Dec 2023Fixed

The report gives no description here.

Open the report
LowInflexible executionFeeGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
LowMigration Contracts Needs To Be Set As HandlerGMX Migration · Guardian Audits · 23 Oct 2023Fixed

The report gives no description here.

Open the report
LowInaccurate CommentChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
LowMissing NatSpecChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
LowTypoChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
Show 10 more
LowTypoChainlink Automations · Guardian Audits · 20 Sep 2023Fixed

The report gives no description here.

Open the report
LowInaccurate Revert DataGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowInconsistent Pool Value For WithdrawalsGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowInconsistent Realtime Feed Action KeyGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowOutdated CommentGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowOutdated NatSpecGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowTypoGMX Oracle Updates · Guardian Audits · 1 Sep 2023Fixed

The report gives no description here.

Open the report
LowDuplicate collateralTokenPrice FetchedGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowgetPositionPnlUsd No Longer Needs Separate PricesGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowInaccurate CommentGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
Show 10 more
LowLack Of Event DataGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowMisleading priceImpactUsd EmittedGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowMissing swapPath ValidationGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowOutdated Price Impact FormulaGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowPrice Impact IncongruenceGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowSuperfluous if CaseGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowTypoGMX Synthetics · Guardian Audits · 11 Jul 2023Fixed

The report gives no description here.

Open the report
LowCrowded Code StyleGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowDuplicated Key In _initAllowedBaseKeysGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowEvent Emission For Insufficient PaymentGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
Show 6 more
LowInefficient ValidationGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowInvalid priceImpactDiffUsd EmittedGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowUnnecessary Cache AttributesGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowUnnecessary ErrorGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowUnnecessary ParameterGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report
LowUser’s PnL Differs From Pool PnLGMX Synthetics · Guardian Audits · 2 Jun 2023Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="gmx"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us