Arbitrary call with user-controlled target
GMX v2 (GMX Synthetics)'s assessment for RD-F-013 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
ExchangeRouter and SubaccountRouter handle user calls through typed handler dispatch with registry-constrained targets. No evidence of .call(userTarget, userdata) with unconstrained target in reviewed contracts. Keeper execution routes through whitelisted keeper addresses.
Sources #
- DocsGMX Known Issues DocumentationGMX known issues - keeper architecture with whitelisted addressesretrieved 2026-05-05
- GMX ExchangeRouter.solExchangeRouter.sol - typed handler dispatch, no arbitrary callretrieved 2026-05-05
Methodology #
Determine whether any contract performs `.call(target, data)` where target and/or data is user-supplied without a target allowlist or selector filter.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol gmx-v2 factor RD-F-013 score green collected_at 2026-05-05 11:15:06