GMX security record
As of 28 Oct 2026, GMX has 38 audit reports by 1 security firm on Trustblock; the latest is by Guardian Audits, dated 14 Apr 2026. Those reports list 1 critical acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits38
Newest first
38 audit reports, all in Guardian Audits’ series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| GMX Timelock Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX OpenInterest Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX LayerZeroProvider Routing | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates Branch Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Referral Code Multichain | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics Price Impact | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Reader Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 7 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 3 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| GMX Crosschain V2.2 1 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
| GMX Crosschain V2.2 6 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX Crosschain V2.2 5 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 4 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 2 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| GMX Gasless Sponsored Calls 1 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Gasless Sponsored Calls 2 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Gasless | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates 11 26 24 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates 9 30 24 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Buyback Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX Config Syncer | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX GLV | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX AutoCancel Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Pyth Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings521
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 13 |
| High | 0 | 5 | 32 |
| Medium | 0 | 60 | 66 |
| Low | 6 | 183 | 155 |
CriticalDuplicate esGMX Rewards By Transferring AccountsAcknowledged
The report gives no description here.
HighPrice Changes Leave Unbacked Lent AmountGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportHighBurning bnGMX Could Be AvoidedAcknowledged
The report gives no description here.
HighKeeper Griefed With orderUpdatedAtBlockAcknowledged
The report gives no description here.
HighReduced Redemption Fees GamedAcknowledged
The report gives no description here.
HighwillPositionCollateralBeSufficient Validation BypassedAcknowledged
The report gives no description here.
MediumFunding Charged Is Not Accurate To OI In TokensGMX OpenInterest Updates · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumMessages Routed With New Data TrappedGMX LayerZeroProvider Routing · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumPrice Impact Arbitrage OpportunitiesGMX OpenInterest Updates · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumCode Registration CensoringGMX Referral Code Multichain · Guardian Audits · 19 Nov 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumSwap Impact Exponent Is Not SplitGMX Synthetics Price Impact · Guardian Audits · 14 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumFunding Fees Are Incorrectly DistributedGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumLongs Incorrectly Share Borrowing FeesGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumPosition Health Changed On UpgradeGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumPositions May Be Prevented From ClosingGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumGas Limits UnderestimatedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumImbalance In Impact Pool From ADL & LiquidationsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumInaccurate LiquidationsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumInterface ChangesGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumLent Amount BuildupGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumMax Impact Configuration RiskGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumMissing Disable integrationId FeatureGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumPrice Deviation In Impact Pool WithdrawGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumPrice Impact Factor GamingGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumReferrals Controlled For Smart Contract TradersGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumSubaccounts May Divert Multichain FundsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportMediumCollateral Lost When Combining SwapsGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportMediumsubAccount Is Not Fully Refunded In Top UpGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportMediumSwap Occurs Without Market UpdateGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportMediumesGMX Claimed To Any AddressGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumExternalHandler Tokens Could Be DrainedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportMediumGLV Oracle Count Wrong For Homogenous MarketsGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportMediumGLV Used To Exit Illiquid MarketsGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportMediumVirtual Inventory Ignored On WithdrawalGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportMediumClosed Positions With AutoCancel OrdersGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportMediumOrders Cannot Be Updated At Max AutoCancelGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportMediumblock.number used on ArbitrumGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumCumulative Delta Does Not Get CompoundedGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumDeviation Truncation Prevents SpreadGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumExperimental Pragma UsageGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumPyth Confidence Intervals Are Not ConsideredGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumPyth Prices Are Used Even When DisabledGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumSpread Taken Multiple TimesGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumStaleness Validation InaccuracyGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportMediumAutoCancel Validation May DoS Order CreationAcknowledged
The report gives no description here.
MediumBonus esGMX Require Less Paired TokensAcknowledged
The report gives no description here.
MediumChainlink Feed ManipulationAcknowledged
The report gives no description here.
MediumCollateral Prioritized Over PnLAcknowledged
The report gives no description here.
MediumDoS Due To Crossed MarketsAcknowledged
The report gives no description here.
MediumgetExecutionGas Needs to Account for Callback GasAcknowledged
The report gives no description here.
Show 10 more
MediumIncorrect Decrease Gas EstimationAcknowledged
The report gives no description here.
MediumInfinite Voting PowerAcknowledged
The report gives no description here.
MediumInvalid Deposit Price Impact For Homogenous MarketsAcknowledged
The report gives no description here.
MediumIssues With Equity Synthetic TokensAcknowledged
The report gives no description here.
MediumLiquidation Gas Usage May Exceed Block Gas LimitAcknowledged
The report gives no description here.
MediumNegative Pool Value DoSAcknowledged
The report gives no description here.
MediumNon-zero Effect On Pool ValueAcknowledged
The report gives no description here.
MediumperformUpkeep Can Be Used To Execute Any orderTypeAcknowledged
The report gives no description here.
MediumPositive Impact MisrepresentedAcknowledged
The report gives no description here.
MediumSaved Callback Keeper GriefingAcknowledged
The report gives no description here.
Show 10 more
MediumSequencer Outage RisksAcknowledged
The report gives no description here.
MediumShorts Arbitrarily Pay Stable Funding To LongsAcknowledged
The report gives no description here.
MediumUnbounded Virtual Inventory Price ImpactAcknowledged
The report gives no description here.
MediumUnwieldy Claimable Collateral ControlsAcknowledged
The report gives no description here.
MediumUsers Vest Without Pairing Backed sbfGMXAcknowledged
The report gives no description here.
MediumVester Withdrawals May Be DoS’dAcknowledged
The report gives no description here.
LowReferral Timelock config deviates from legacyGMX Timelock Updates · Guardian Audits · 14 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowReferralTimelock has scope beyond referral adminGMX Timelock Updates · Guardian Audits · 14 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowTimelocks use outdated Arbitrum config addressesGMX Timelock Updates · Guardian Audits · 14 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowFunding MisbehaviorGMX OpenInterest Updates · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowSkip Smaller Side May Skip Larger Reserved SideGMX OpenInterest Updates · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowWillPositionCollateralBeSufficient Check Still ReliesGMX OpenInterest Updates · Guardian Audits · 29 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowpositionValueInUsd Misses Claimable CollateralGMX Updates Branch Review · Guardian Audits · 22 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowPotentially Dangerous Parameter ChangeGMX Updates Branch Review · Guardian Audits · 22 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowDangerous OI In Tokens Base KeyGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowFunding Is Charged Inaccurately RetroactivelyGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowLacking OI Notional CapsGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowLikely Impact Pool DearthGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowMaxCollateralSum Decrease DoSGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowNegative Price Impact Capped On CostGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowOne Way Migration Process WarningGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLoworacleProviderUpdatedAt Ineffective ValidationGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowPositive Price Impact Capped On CostGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowPrice Impact Pool Gaming RiskGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowSaved Funding Factor Rate ResetGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowStepwise Pool Value ChangesGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowVirtual Inventory Keys Are Allowed Base KeysGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowVirtual Inventory Migration RisksGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowUnused StructsGMX Reader Review · Guardian Audits · 25 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowLacking Signature Deadline Or NonceGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowMax Data List Length WarningGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowMin Amount Is AlteredGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowSome Tokens Incompatible With Edge OracleGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowTerms Should Be Set Before DepositingGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowAsymmetric CappingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowbridgeIn Is Marked As PayableGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowConfig Keeper Trusted To Set ProvidersGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowDangerous Timelock Admin AssignmentGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowDocumentation Regarding WithdrawalsGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowDomainSeparator DuplicationGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowExecution Cost Greater Than Provided FeeGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowExecution Price InaccuracyGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowExternal Call Gas Is Not CorrectedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowFrontrunning RiskGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowFrontrunning withdrawFromPositionImpactPoolGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowFunctions Cannot Be Used With MulticallGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowImpact Distributions For Pending ImpactGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowImpact Pool Distribution RiskGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowImpact Pool Withdrawals May Constantly RevertGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowInaccurate executionPrice EmittedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowInconsistent Handler AddressesGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowIncorrect srcChainId EmittedGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowIncorrect srcChainId UsedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowIncreased Signature ProtectionGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowIntegration Ids Can't Be Set With MultichainGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowKeepers May Censor Actions Using BridgeOutGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLacking Collateral Factor ValidationsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLacking Default Admin RulesGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLacking Stargate Fee ProtectionGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLast Market Not ValidatedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowLayerZero ConfigurationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLendable Amt May Not Belong To PoolGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLent Amount Left Due To RoundingGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowLoss Of Signature Cancelability And SequentialityGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowMessagingReceipt Not ReturnedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowMissing Gas Limit Config ParamsGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowMissing isSrcChainIdEnabled CheckGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowModifier Gas Not Accounted ForGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowNegative Impact Caps IgnoredGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowNonexistent srcChainId Is Not ValidatedGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowOrder Cancels Do Not Update lastSrcChainIdGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowOutdated TimelockController UsedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPermits Allowed For Multichain ActionsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPotential Feed ID Collision Due To TruncationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPrice Divergence Allows For A Large Lent ValueGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPrice Impact Factors Should Be AdjustedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPrice Impact GriefingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowPrice Impact Not GuaranteedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowProvider May Be Immediately UpdatedGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowRisk Free Trade Opportunity With Malicious RevertsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowSpread Reduction Factor UnusedGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowStargate Quote InaccuraciesGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowUnnecessary referralStorage VariableGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowUnnecessary Reordering Of Transfer StepsGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowuserNonce Values Can Be ReusedGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Acknowledged
The report gives no description here.
Open the reportLowBatch Orders Do Not Work As ExpectedGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowEIP-712 Signature ReadabilityGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowFixed _getCalldataGas ParametersGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowGMX 1Balance Affected By WETH PriceGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowInsufficient gelatoRelayFeeBaseAmountGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowLess Premium Is Charged In ConfigGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowMissing Market Balance Invariant CheckGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowMissing Refund In externalCallsGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowOperational SafeguardsGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowOverestimation Of L1 Poster FeeGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowPartial Calldata Length Used In L2 Fee EstimationGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowSponsored Call DoS Due To External DependencyGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowSubaccounts: Gas Griefing RiskGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowTrust Assumption Subaccounts: Fee Inflation CallbackGasLimitGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowAccount Can Avoid Refunding SubaccountGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowAccount Can Steal executionFee From subAccountGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowBypassing Subaccount Disabled FeatureGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowComingling Of Gelato And GMX FeeGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowMissing validateMarketTokenBalance ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowNonce Dependence Prevents Subsequent ActionsGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowRedundant Required Fee CheckGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowSubAccount Can Make Account Lose FundsGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowSubaccounts Access To Funds Are Not PartitionedGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowTokens Which Do Not Support PermitGMX Gasless · Guardian Audits · 27 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowSpread Reduction Increases Arbitrage OpportunitiesGMX Updates 11 26 24 · Guardian Audits · 5 Dec 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowdiffUsdAfterExponent Precision LossGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowFeeGmxTracker Should Only Allow To Stake sbeGMXGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowFunding Configuration Invalidates Pending FundingGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowIntegrations Broken By Deposit Gas UpdateGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowInvalid Funding Increase With Zero DiffGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowLacking Zero Address ChecksGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowLiquidation Fee AvoidedGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowMissing Initialized ValuesGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowNew Deposit Gas Key ConfigurationGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowPrivate Staking ModeGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowRewardRouterV2 Contract MissingGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowSome Accounts Cannot Be Re-StakedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowSome Accounts May Need To Be ReReStakedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowUsers May Provide Less Gas Than NecessaryGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowUsers Required To Send Extraneous GasGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowvalidFromTime Orders Executed Before Their DateGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowVesterCap maxBoostBasisPoints InconsistencyGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowVesterCap May Not Function CorrectlyGMX Buyback Updates · Guardian Audits · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowAttacker can extract value from shiftsGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowDoS Via Type CastingGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowGLV Deposit Creation DoSGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowGLV Salt Lookup Not ClearedGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowGM Deposits With False isMarketTokenDepositGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowNo Keeper Incentives To Create ShiftsGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowShifting Is Allowed To Same MarketGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowUnused Struct ParamsGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowUsers can imbalance glv to reduce glv yieldGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowUsers Charged For Oracles On CancelGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowWithdrawal/Shift count reserved GM as availableGMX GLV · Guardian Audits · 3 Sep 2024Acknowledged
The report gives no description here.
Open the reportLowCompromised ConfigKeeper Can Arbitrage ImpactGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowCompromised ConfigKeeper Can Liquidate AllGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowCompromised ConfigKeeper Can Reset HoldingGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowLacking Zero Address ChecksGMX AutoCancel Updates · Guardian Audits · 9 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowArray Length MismatchGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowFull Price Duration Range Cannot Be UsedGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowLack of maxPriceUpdateDelay ValidationGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowLacking Configuration ValidationsGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowMisnamed ParametersGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowUnused CodeGMX Pyth Updates · Guardian Audits · 29 Jul 2024Acknowledged
The report gives no description here.
Open the reportLowAccept Ether OptimizationAcknowledged
The report gives no description here.
Show 10 more
LowBid/Ask ManipulationAcknowledged
The report gives no description here.
LowBlock Number Provided As TimeAcknowledged
The report gives no description here.
LowCallback And Refund Receiver RisksAcknowledged
The report gives no description here.
LowCheck Odd Gas OptimizationAcknowledged
The report gives no description here.
LowEmpty Event DataAcknowledged
The report gives no description here.
LowEmpty Swap Path For Swap OrdersAcknowledged
The report gives no description here.
LowExchangeRouter Inefficient LoopsAcknowledged
The report gives no description here.
LowFloating Pragma VersionAcknowledged
The report gives no description here.
LowHardcoded VerifierProxyAcknowledged
The report gives no description here.
LowIncorrect Error MessageAcknowledged
The report gives no description here.
Show 10 more
LowIncorrect Estimated Price CountsAcknowledged
The report gives no description here.
LowInefficient If CaseAcknowledged
The report gives no description here.
LowInefficient Price FetchingAcknowledged
The report gives no description here.
LowinitialCollateralDeltaAmount Unexpected AdjustmentAcknowledged
The report gives no description here.
LowinStrictTransferMode Does Not Ensure Successful acceptTransferAcknowledged
The report gives no description here.
LowKey Contract Addresses May Not Be UpdatedAcknowledged
The report gives no description here.
LowLack Of cannotExecute Modifier For checkLogAcknowledged
The report gives no description here.
LowLack Of Realtime Feed Tokens OptimizationAcknowledged
The report gives no description here.
LowLiquidation FeeAcknowledged
The report gives no description here.
LowMissing NatSpecAcknowledged
The report gives no description here.
Show 10 more
LowNew VesterCap ConfigurationsAcknowledged
The report gives no description here.
LowOptimal Usage Borrowing Can Remain ConstantAcknowledged
The report gives no description here.
LowOracle Block Validation OptimizationsAcknowledged
The report gives no description here.
LowOutdated NatSpecAcknowledged
The report gives no description here.
LowPrices May Be Older Than The Allowed AgeAcknowledged
The report gives no description here.
LowRedundant if CaseAcknowledged
The report gives no description here.
LowRedundant Price FetchingAcknowledged
The report gives no description here.
LowStable Funding Factor Liquidation RiskAcknowledged
The report gives no description here.
LowSuperfluous Price Impact LogicAcknowledged
The report gives no description here.
LowSuperfluous Stack VariableAcknowledged
The report gives no description here.
Show 9 more
LowSwap Before Updating Borrowing StateAcknowledged
The report gives no description here.
LowTotal AutoCancel Gas Supersedes Max Auto CancelsAcknowledged
The report gives no description here.
LowTypoAcknowledged
The report gives no description here.
LowUnnecessary perSizeValues InitializationAcknowledged
The report gives no description here.
LowUnnecessary Vote Syncing In _compoundAcknowledged
The report gives no description here.
LowUnsorted Block NumbersAcknowledged
The report gives no description here.
LowUsers Negatively Impacted By Price SpreadAcknowledged
The report gives no description here.
LowUsers Pay Extra in Fees In Certain MarketsAcknowledged
The report gives no description here.
LowUsers With Reserved sbfGMX May Not Be Able ToAcknowledged
The report gives no description here.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gmx"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us