GMX security record
As of 28 Oct 2026, GMX has 38 audit reports by 1 security firm on Trustblock; the latest is by Guardian Audits, dated 14 Apr 2026. Those reports list 1 critical acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits38
Newest first
38 audit reports, all in Guardian Audits’ series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| GMX VesterCap Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
| GMX Updates 1 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| GMX Updates 2 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| GMX Config | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Governance | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Migration | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Chainlink Automations | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| GMX Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 open critical finding | Open · GitHub |
| GMX Oracle Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX Synthetics | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings521
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 13 |
| High | 0 | 5 | 32 |
| Medium | 0 | 60 | 66 |
| Low | 6 | 183 | 155 |
Marked Informational by the firms. Not counted as findings.
InformationalMegaETH Safe uses a different signer setGMX Timelock Updates · Guardian Audits · 14 Apr 2026Acknowledged
The report gives no description here.
Open the reportInformationalKey Values Should Be Assigned Before ProductionGMX Synthetics Price Impact · Guardian Audits · 14 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalDecrease Flow Always Uses Initial Margin FactorGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalFunding And Borrowing Fees Can Prevent DepositGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalFunction Without LogicGMX Reader Review · Guardian Audits · 25 Aug 2025Acknowledged
The report gives no description here.
Open the reportInformationalInconsistent Function Parameter NamesGMX Reader Review · Guardian Audits · 25 Aug 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing Params In NatSpecGMX Reader Review · Guardian Audits · 25 Aug 2025Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gmx"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us