defirisk.co
rubric v1.7.0

Disclosure channel exists

GMX v2 (GMX Synthetics)'s assessment for RD-F-175 — scored not_assessed on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Immunefi bug bounty program is active at https://immunefi.com/bug-bounty/gmx/ with $5M max payout for critical smart contract vulnerabilities, 250 in-scope assets across Arbitrum and Avalanche. Program active since 2021-10-20; $2.6M paid across 22 reports confirms active monitoring and payout history. Immunefi median resolution time of 9 hours. Score = green.

Sources #

  • Curator note
    https://immunefi.com/bug-bounty/gmx/retrieved 2026-05-05
  • Curator note
    https://immunefi.com/bug-bounty/gmx/information/retrieved 2026-05-05

Methodology #

Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol gmx-v2 factor RD-F-175 score not_assessed collected_at 2026-05-05 11:15:06