GMX security record
As of 28 Oct 2026, GMX has 38 audit reports by 1 security firm on Trustblock; the latest is by Guardian Audits, dated 14 Apr 2026. Those reports list 1 critical acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits38
Newest first
38 audit reports, all in Guardian Audits’ series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| GMX Timelock Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX OpenInterest Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX LayerZeroProvider Routing | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates Branch Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Referral Code Multichain | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics Price Impact | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Synthetics Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Reader Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 7 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 3 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| GMX Crosschain V2.2 1 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
| GMX Crosschain V2.2 6 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX Crosschain V2.2 5 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 4 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Crosschain V2.2 2 Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| GMX Gasless Sponsored Calls 1 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Gasless Sponsored Calls 2 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Gasless | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates 11 26 24 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Updates 9 30 24 | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Buyback Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX Config Syncer | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX GLV | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| GMX AutoCancel Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| GMX Pyth Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings521
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 13 |
| High | 0 | 5 | 32 |
| Medium | 0 | 60 | 66 |
| Low | 6 | 183 | 155 |
CriticalAnyone Can Drain Multichain GM Token’s BalanceGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalAnyone Can Drain The Multichain BalanceGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalArbitrary Execution & Balance Drain RiskGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalEdge Oracle Uses Invalid DecimalsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalInconsistent AccountingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalMissing ValidationsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportCriticalNecessary Handler Statuses Are Not SetGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportCriticalGLV Arbitraged With pnlToPoolFactorGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportCriticalLimitSwaps Cannot Execute After Request ExpirationFixed
The report gives no description here.
CriticalLiquidations Prevented With updateOrderFixed
The report gives no description here.
Show 10 more
CriticalOrders Requiring More Than 5 Million Gas Cannot ExecuteFixed
The report gives no description here.
CriticalPosition fundingFeeAmountPerSize Errantly ResetFixed
The report gives no description here.
CriticalWithdrawals With Swaps Are IncompatibleFixed
The report gives no description here.
HighFunding Is Broken Due To AsymmetryGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed
The report gives no description here.
Open the reportHighVirtual Inventory Does Not Track CorrectlyGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed
The report gives no description here.
Open the reportHighSecondary Amount Is Not Bridged OutGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed
The report gives no description here.
Open the reportHighBridged Withdrawals FailGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighImbalanced Impact Caps Cause Unpayable LentGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighMax Impact Caps Double Count Lent AmountsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighMissing Expo In messageHashGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighOverflow DoS In withdrawFromPositionImpactPoolGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighPending Amounts Errantly Capped To ZeroGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighPosition Validated With Atomic OraclesGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighPositive Impact Becomes UnbackedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighPrice Impact Not GuaranteedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighTransfer To EOA Instead Of Multichain BalanceGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighUncapped Positive Impact In Liquidation CheckGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighUnclear Lending ConstraintsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighWrong Token Is Used In bridgeOutFromControllerGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportHighAtomic Swaps With Normal FeesGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighcallbackContract Siphons RefundsGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportHighLacking Cancellation Receiver ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportHighMissing decreasePositionSwapType ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportHighMissing Update Order Fee LogicGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportHighAccount Transfers Abused To Invalidate VestingGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportHighIncorrect Vesting Validation On Account TransferGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportHighOld Reward Router Cannot Be DisabledGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportHighvalidFromTime Risk Free TradesGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportHighExecution fee locked in router on cancellationGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportHighGLV Callbacks Do Not Validate Remaining GasGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
HighAnyone May performUpkeepFixed
The report gives no description here.
HighBorrowing Fees Avoided Due To SkipFixed
The report gives no description here.
HighKeeper's Not Remunerated For Cancellation CallbackFixed
The report gives no description here.
HighpriceImpactDiffUsd Unclaimable For Adjusted PnLFixed
The report gives no description here.
HighUSDC vs USDC.eFixed
The report gives no description here.
MediumCollateral MismatchGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumComposed Deposit CensoringGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumEarly Validation Allows Inconsistent Market StateGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumImpact Pool Withdrawals Use An Invalid RatioGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumImpossible To Execute Some Timelock ActionsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumIncorrect Atomic Oracle Provider HandlingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Balance Check In bridgeOutGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Gas Utils FunctionGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Position Key UsedGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumIntegration Id Not Validated For Gasless RoutersGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumMalicious Token Gas Griefs KeepersGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumMax Lent Bypassed By Splitting OrdersGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumMissing validateSequencerUpGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumMissing validateSequencerUp In Impact PoolGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumNonce Always IncreasedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPending Price Impact Can Be LostGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumSame Actions Cannot Be DoneGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumStale Funding State UsedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumSubaccount Action ReplayGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumUnnecessary Relay Fee ChargedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumUntrusted srcChainIdGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumvalidatePosition Might DoS Valid ActionsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Gas EstimationGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportMediumremoveSubaccount Cannot Be GaslessGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportMediumUnused Permit DoSGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumGas Multiplier Fee Key Errantly RemovedGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportMediumOrder Funds May Be Lost Upon CancellationGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportMediumUse Of DelegateCall Within A For Loop In A PayableGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportMediumExcess execution fee will be requiredGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumexecutionFee Should Be UpdatedGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumGLV Actions Cannot Be SimulatedGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumGLV Read-only Reentrancy RiskGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumGLV Trapped Funds Upon DisabledGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumGLV Used For Atomic WithdrawalsGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumGLV Withdrawal Callback Gas Cost IgnoredGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumInsufficient Gas Forwarded For RefundGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumUser GLV Deposits Errantly MaximizedGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportMediumAdditional Ether LostFixed
The report gives no description here.
MediumadjustedPriceImpactDiffAmount MinimizedFixed
The report gives no description here.
MediumCallback Gas Validation Ignores 63/64 RuleFixed
The report gives no description here.
MediumCapped PnL Leads To Incongruent AccountingFixed
The report gives no description here.
MediumDecrease Swap Type Not Included In Gas EstimationFixed
The report gives no description here.
MediumFeedIds Must Be Set For Every TokenFixed
The report gives no description here.
MediumFees May Be Errantly Credited To The PoolFixed
The report gives no description here.
MediumInaccurate Price Impact FormulaFixed
The report gives no description here.
Show 10 more
MediumIncongruent Price ImpactFixed
The report gives no description here.
MediumIncongruent Price Impact For Decrease OrdersFixed
The report gives no description here.
MediumIncorrect block.timestamp UsedFixed
The report gives no description here.
MediumLack of Contract Existence CheckFixed
The report gives no description here.
MediumLack Of safeTransfer For Arbitrary TokenFixed
The report gives no description here.
MediumLiquidation Reverts Due To UnderflowFixed
The report gives no description here.
MediumLists With Different LengthsFixed
The report gives no description here.
MediumNo way for user to add cancellation receiverFixed
The report gives no description here.
MediumOld Estimated Execution Base Gas Fee UsedFixed
The report gives no description here.
MediumOrders Which Close Positions May Be CensoredFixed
The report gives no description here.
Show 10 more
MediumOverwritten Callback ContractFixed
The report gives no description here.
MediumPayload Attack Enables Griefing Of KeepersFixed
The report gives no description here.
MediumPosition Price Impact Not OffsetFixed
The report gives no description here.
MediumPositive Impact Deposit Not ValidatedFixed
The report gives no description here.
MediumpriceImpactDiffUsd Paid Before priceImpactUsdFixed
The report gives no description here.
MediumRead-only ReentrancyFixed
The report gives no description here.
MediumReduced Burn Fee Can Be Larger Than CurrentFixed
The report gives no description here.
MediumSubsequent Mints Cause Market Token InflationFixed
The report gives no description here.
MediumUser Forced To Deposit Both TokensFixed
The report gives no description here.
MediumVerifier Configuration Risk-Free TradeFixed
The report gives no description here.
Show 10 more
MediumWrong Impact Pool MaximizationFixed
The report gives no description here.
LowLiquidation Preference HijackedGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed
The report gives no description here.
Open the reportLowMax Price Is Always UsedGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed
The report gives no description here.
Open the reportLowPosition Health Can Decrease On Collateral DepositsGMX Synthetics Updates · Guardian Audits · 3 Nov 2025Fixed
The report gives no description here.
Open the reportLowLacking Domain SeparatorGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed
The report gives no description here.
Open the reportLowLacking From And To ValidationsGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed
The report gives no description here.
Open the reportLowMisleading Account EmittedGMX Crosschain V2.2 7 Report · Guardian Audits · 28 Jul 2025Fixed
The report gives no description here.
Open the reportLowAssumed Shared Decimals Of 6GMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowBridge Out Same Chain Requires Two TransfersGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowBridged Funds Can Be Lost Or TrappedGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowBridging Fee Is Paid TwiceGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowBridging Out Tokens From GLV VaultGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowConfig Keeper May Init An Invalid ProviderGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowDuplicated CodeGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowEarly Return Should Include Equality OperatorGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLoweidToSrcChainId Might Not Be DefinedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowFeatures Not Validated During ShiftsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowInability To Bridge Out During ShiftGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowInconsistent ValidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Comparison OperatorGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect Gas Tracking For RelayGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowIncorrect recordTransferIn UsageGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Zero Amount Check In recordBridgeInGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowInitialize FrontrunningGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowisSrcChainIdEnabledKey Can Be BypassedGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowLacking Error ValidationGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowLent Payback Is Not Rounded UpGMX Crosschain V2.2 5 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowLiquidation Optimization createLiquidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMarketPoolValueInfo NatSpec WrongGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowmaxLendableFactor ConfigurationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowMisleading Comment For Bridge Out FeeGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMisleading Timelock Transaction SuccessGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing CLAIMABLE_COLLATERAL_DELAY ConfigGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing Feature Flag ValidationGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing MAX_DATA_LENGTH InitializationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing NatSpec ParamGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing nonReentrant ProtectionGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing Reentrancy GuardsGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing SafeguardsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing Validation For bridgeOutFromControllerGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowMisspelled Filenames In Executor ContractsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowModifier Execution OrderGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowOld Orders Can Overwrite Newer OnesGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowOld Orders Can Overwrite Newer OnesGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowPrecision Loss For Token WithdrawalGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowRedundant WithRelayCache StructGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowRisk Free Trade By Causing RevertsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowtransferOut Perturbs Multichain AccountingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnclear Native Deposit BridgeOut ValidationGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnexpected Deposit Execution RevertsGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnexpected Keys Are SettableGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnfavorable Impact Withdrawal RoundingGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnintended Reverts With Zero Transfer TokensGMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary amountLD Param In recordBridgeInGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary Approval For WNT When BridgingGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary srcChainId In bridgeInGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary TernaryGMX Crosschain V2.2 3 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary toBytes32GMX Crosschain V2.2 6 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUntrusted srcChainIdGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnused Cache Struct ParamGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowValidate Receiver In batchClaimAffiliateRewardsGMX Crosschain V2.2 2 Report · Guardian Audits · 26 Jul 2025Fixed
The report gives no description here.
Open the reportLowAverage Gas Cost Overestimated : calldataLength * 12GMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowImproper Ordering Of oraclePriceCountGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Comment: Calldata Gas EstimationGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Comment: GelatoRelayRouterGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowminPrice Used For maxRelayFeeSwapUsdGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowModifier Execution OrderGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowOver/Under EstimationGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowRelay Params Not InitializedGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowReturn Handling For Order CreationGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowSuperfluous Return StatementGMX Gasless Sponsored Calls 2 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowSwap Fee, Slippage And Bridge Fee Not Taken Into AccountGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowTrust Assumption Subaccounts: Fee Inflation Risks In Sponsored CallsGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowTrust Assumption Subaccounts: Increase Likelihood Of ArbitrageGMX Gasless Sponsored Calls 1 · Guardian Audits · 11 Apr 2025Fixed
The report gives no description here.
Open the reportLowDuplicated orderKey EventsGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowLacking Feature ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowMissing MaxFee Validation For RelayerGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowMissing Swap Path ValidationGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowPermit FrontrunningGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowremoveSubaccount Marked As PayableGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnnecessary Wnt Transfers To/From OrderVaultGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLowUnused EnumGMX Gasless · Guardian Audits · 27 Feb 2025Fixed
The report gives no description here.
Open the reportLow_restakeBnGmx Ignores RewardRouterV2GMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowDangerous maxFundingFactorPerSecondGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowInaccurate CommentGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowLiquidation Fee Uses Round Down DivisionGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowMissing nonReentrant ModifierGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowMultiple Operations Require An UnintendedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowNonzero validFrom Allowed For Market OrdersGMX Updates 9 30 24 · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowUnused VariableGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowUsers Cannot Unstake Until Re-stakedGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowvalidateReceiver Is Missing Checks On TheGMX Buyback Updates · Guardian Audits · 16 Oct 2024Fixed
The report gives no description here.
Open the reportLowAdditional Allowed KeysGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowDuplicate allUpdateTypes EntriesGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowGeneral Key RiskGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowgetLatestUpdateByType DoSGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowIncorrect previousValue StoredGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowLacking Market ValidationGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowMissing Allowed KeysGMX Config Syncer · Guardian Audits · 4 Sep 2024Fixed
The report gives no description here.
Open the reportLowblock.timestamp UsageGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowCancelling Deposits Unnecessarily Transfers TokensGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowDeposits With Zero Short Token FailGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowErrant GLV KeysGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowExecution Fees Increased By Empty MarketsGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowFeature validation occurs before try-catchGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowFunds Are Not Synced In The GLV VaultGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowGLV Deposit Config Added TwiceGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowGLV Deposits Incorrectly Value FeesGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowGLV GM Balance Validation Minimizes ValueGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowIncorrect Param Used in EventGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowLacking GlobalNonReentrant ModifierGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowLacking GM Market Count CapGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowMalicious Code Can Be Set In Token Name/SymbolGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowMisleading setMarketTokenAmount FunctionGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowMissing function for feature keyGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowSuperfluous ImportsGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowSuperfluous receivedUsd ValueGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowUnused errorsGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowUnused marketCount VariableGMX GLV · Guardian Audits · 3 Sep 2024Fixed
The report gives no description here.
Open the reportLowConfig Uses realtimeFeed Instead Of dataStreamFixed
The report gives no description here.
Show 10 more
LowCrowded Code StyleFixed
The report gives no description here.
LowDuplicate collateralTokenPrice FetchedFixed
The report gives no description here.
LowDuplicated Key In _initAllowedBaseKeysFixed
The report gives no description here.
LowEarly Return Misses Voting SyncFixed
The report gives no description here.
LowEvent Emission For Insufficient PaymentFixed
The report gives no description here.
LowgetPositionPnlUsd No Longer Needs Separate PricesFixed
The report gives no description here.
LowInaccurate CommentFixed
The report gives no description here.
LowInaccurate CommentFixed
The report gives no description here.
LowInaccurate Revert DataFixed
The report gives no description here.
LowInconsistent AutoCancel ValidationFixed
The report gives no description here.
Show 10 more
LowInconsistent Pool Value For WithdrawalsFixed
The report gives no description here.
LowInconsistent Realtime Feed Action KeyFixed
The report gives no description here.
LowIncorrect Oracle Price EstimateFixed
The report gives no description here.
LowInefficient ValidationFixed
The report gives no description here.
LowInflexible executionFeeFixed
The report gives no description here.
LowInvalid priceImpactDiffUsd EmittedFixed
The report gives no description here.
LowLack Of Event DataFixed
The report gives no description here.
LowMigration Contracts Needs To Be Set As HandlerFixed
The report gives no description here.
LowMiniscule proposalThreshold ConfiguredFixed
The report gives no description here.
LowMisleading priceImpactUsd EmittedFixed
The report gives no description here.
Show 10 more
LowMissing NatSpecFixed
The report gives no description here.
LowMissing swapPath ValidationFixed
The report gives no description here.
LowOutdated CommentFixed
The report gives no description here.
LowOutdated NatSpecFixed
The report gives no description here.
LowOutdated Price Impact FormulaFixed
The report gives no description here.
LowPrice Impact IncongruenceFixed
The report gives no description here.
LowSuperfluous if CaseFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
Show 6 more
LowTypoFixed
The report gives no description here.
LowUnnecessary Cache AttributesFixed
The report gives no description here.
LowUnnecessary ErrorFixed
The report gives no description here.
LowUnnecessary ParameterFixed
The report gives no description here.
LowUnnecessary Voting Sync In _stakeGmxFixed
The report gives no description here.
LowUser’s PnL Differs From Pool PnLFixed
The report gives no description here.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gmx"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us