★ Public initialize() without initializer modifier
GMX v2 (GMX Synthetics)'s assessment for RD-F-022 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
GMX v2/synthetics uses constructor-based initialization throughout. ExchangeRouter.sol, Oracle.sol, and SubaccountRouter.sol all use standard constructors; no initialize() function found in any reviewed core contract. The non-proxy re-deploy model means there is no initializer vulnerability surface. Critical factor: CLEAN.
Sources #
- GitHub
- GMX ExchangeRouter.solExchangeRouter.sol - constructor only, no initialize() functionretrieved 2026-05-05
Methodology #
Determine whether any implementation contract exposes `initialize(…)` without the OpenZeppelin `initializer` modifier or equivalent initialization lock.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol gmx-v2 factor RD-F-022 score green collected_at 2026-05-05 11:15:06