UUPS _authorizeUpgrade correctly permissioned

GMX v2 (GMX Synthetics)'s assessment for RD-F-021 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

GMX v2 does not use the UUPS proxy pattern. Contracts are non-upgradeable in the proxy sense - logic contracts are redeployed on upgrades. No _authorizeUpgrade function exists. Factor is not applicable to this re-deploy architecture.

Sources #

Docs
GMX Contract Addresses DocumentationGMX docs - contract addresses change when logic contracts are upgraded (re-deploy model)retrieved 2026-05-05
GitHub
GMX ExchangeRouter.solExchangeRouter.sol - constructor-based init, no proxy patternretrieved 2026-05-05

Methodology #

Determine whether the UUPS implementation defines `_authorizeUpgrade(address)` restricted to owner/admin/timelock (not open to arbitrary callers).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol gmx-v2 factor RD-F-021 score not_applicable collected_at 2026-05-05 11:15:06