Who can upgrade Store
Squads 4 of 7 · 600 s delay
- Type
- Squads 4 of 7
- Threshold
- 4 of 7 signers
- Signers
- 7 listed
- Time lock
- 600 s
- Config authority
- None: changes go through the multisig
- Effective delay
- 600 s delay
- Address
- CxnE…unP1
Solana · Perps
GMX Solana
- TVL
- $26.49M
- Context only: never changes a rating
- 24h fees
- $82.36K
- −24.2% vs 7 days earlier
- Upgrade controller
- Squads 4 of 7 · 600 s delay
- Weakest control over the core programs
- Stage
- Stage 0
- 2 requirements missing for Stage 1
- Last on-chain change
- None recorded
- Snapshot 2026-10-24 · read at Solana slot 460,976,698
Six risk factors independent ratings, never combined into one score
- Upgrade controlMediumSquads v4 multisig, 4 of 7 voters, time lock 600 s
- Upgrade delayHightime lock 600 s
- Admin powersMedium`authority` can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 600 s
- Code transparencyLowverified build of https://github.com/gmsol-labs/gmx-solana/tree/8af1e70c0c0b6ff9d6b41ba4997910588fbcec28 at 8af1e70c0c0b6ff9d6b41ba4997910588fbcec28
- Oracle dependencyUnknownprice feeds not yet listed in the registry
- DependenciesHighcallee Gt9S…ZA3c is unrecognized controller AAL4…edAD
Summary
- Solana
- Perps
- Squads-controlled
- Verified build
GMX Solana is a perpetual futures exchange on Solana. This page shows who can change it, how fast, and the on-chain account behind every rating.
Embed the Stage badge
HTML
<a href="https://celebtir.com/protocols/gmx-solana/"><img src="https://celebtir.com/badges/gmx-solana.svg" alt="GMX Solana on Celebtir: Stage 0"></a>Markdown
[](https://celebtir.com/protocols/gmx-solana/)Value
Show as table
| Date | TVL |
|---|---|
| 2026-10-21 | $26.33M |
| 2026-10-24 | $26.49M |
Asset groups
| Group | Value | Share |
|---|---|---|
| Stablecoins | $24.16M | 91.2% |
| SOL and staked SOL | $1.77M | 6.7% |
| BTC | $15.77K | 0.1% |
| Other | $542.18K | 2.0% |
Tokens used
| Token | Used as | Worst rating |
|---|---|---|
| SOL | deposit | Lowno freeze, pause or seize power; native to Solana; mint authority renounced: supply is fixed; no transfer restrictions |
| USDC | deposit | Highbalances can be frozen by single key 7dGb…Crar; new supply can be minted by single key BJE5…5ruG |
Activity
Volume unavailable: no volume metric for this category; fees only.
Show as table
| Date | Fees |
|---|---|
| 2026-09-24 | $104.36K |
| 2026-09-25 | $28.37K |
| 2026-09-26 | $3.97K |
| 2026-09-27 | $19.39K |
| 2026-09-28 | $424.66K |
| 2026-09-29 | $152.11K |
| 2026-09-30 | $221.29K |
| 2026-10-01 | $220.28K |
| 2026-10-02 | $393.02K |
| 2026-10-03 | $31.5K |
| 2026-10-04 | $127.62K |
| 2026-10-05 | $529.43K |
| 2026-10-06 | $262.66K |
| 2026-10-07 | $172.74K |
| 2026-10-08 | $138.85K |
| 2026-10-09 | $120.55K |
| 2026-10-10 | $8.52K |
| 2026-10-11 | $18.24K |
| 2026-10-12 | $126.84K |
| 2026-10-13 | $125.69K |
| 2026-10-14 | $274.96K |
| 2026-10-15 | $257.93K |
| 2026-10-16 | $148.11K |
| 2026-10-17 | $26.69K |
| 2026-10-18 | $38.75K |
| 2026-10-19 | $81.57K |
| 2026-10-20 | $178.68K |
| 2026-10-21 | $154.18K |
| 2026-10-22 | $165.94K |
| 2026-10-23 | $82.36K |
Risk summary
- HighAn approved upgrade takes effect after 600 s. Withdrawal completion within that period is not established by these configuration facts.
- HighProgram Gt9S…ZA3c, which this protocol calls with user funds, can be upgraded by the unrecognized controller AAL4…edAD.
- MediumCore program code can be replaced by 4 of 7 votersA multisig member with the Vote permission. Celebtir counts signers, not all members, when it compares a threshold. of multisigAn account that acts only when enough of its members approve. On Solana this is usually a Squads multisig. CxnE…unP1.
- MediumProtocol parameters can be changed by 4 of 7 voters of multisig CxnE…unP1 using
authority.
Risk analysis
Upgrade control
MediumSquadsThe multisig program most Solana protocols use to hold upgrade and admin keys (version 4 is supported). v4 multisig, 4 of 7 voters, time lockA wait between approving a change and the change taking effect, which gives users time to leave. 600 s
To improve: a multisig of 5+ voters at a 60%+ thresholdHow many signers of a multisig must approve before it can act. → LOW, or make the program immutableNo key can change it: the upgrade authority was removed, or the program was deployed with a loader that cannot upgrade.
Upgrade delay
Hightime lock 600 s
To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW
Admin powers
Mediumauthority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 600 sTo improve: limit admin keysA key stored in a protocol's own accounts that can change parameters, pause the protocol or move funds, without upgrading its code. to parameters behind a 24 h+ time lock, or renounce them → LOW
Code transparency
Lowverified buildProof that the deployed program was built from a public commit, checked by OtterSec's verification service. of gmsol-labs/gmx-solana@8af1e70 at 8af1e70c0c0b6ff9d6b41ba4997910588fbcec28
To improve: none: LOW is the lowest risk level
Technical evidence (1 account)
- Gmso…ucLo verified_build Solana slot 460,976,625
Oracle dependency
Unknownprice feeds not yet listed in the registry
To improve: verify and register the protocol's price feeds
Dependencies
Highcallee Gt9S…ZA3c is unrecognized controller AAL4…edAD
To improve: callees rated High need a multisig of 3+ voters at a 50%+ threshold → MEDIUM
Stage
Stage 0 · 2 missing for Stage 1
StagesA protocol's headline level, from Stage 0 (the team can change everything quickly) to Stage 2 (users are protected even from the team). Stages describe control, not code security. describe who can change the protocol and how fast. They don't measure code security.
- Stage 0 (current)
- Stage 1
- Stage 2
Stage 0 3 of 3 met
- Met: core programs identified in the registry
- Met: public source for every core program
- Met: upgrade control readable for every core program
Stage 1 4 of 6 met
- Met: upgrade control rated Low or Medium
Satisfied criterion and evidence
MEDIUM: Squads v4 multisig, 4 of 7 voters, time lock 600 s
Published Stage criteria - Missing: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisig
Unmet criterion
Gmso…ucLo: effective time lock 600 s; needs 5 days+ or an emergency multisig of 8+ voters at 75%+
Published Stage criteria - Met: admin powers rated Low or Medium
Satisfied criterion and evidence
MEDIUM:
Published Stage criteriaauthoritycan change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 600 s - Met: no multisig has a single-key config authorityA key that can change a Squads multisig's members, threshold and time lock without a vote. If it is set, it, not the multisig, is the real controller.
- Met: verified builds for all core programs
- Missing: every factor could be read (Unknown caps the Stage at 0)
Unresolved criterion
Unknown: OracleAn account that publishes prices a protocol reads, for example to value collateral or trigger liquidations. dependency
Published Stage criteria
Stage 2 1 of 2 met
- Missing: core programs immutable, or upgradeable only through on-chain governance with a long delay
- Met: no key can move or freeze user funds
Control graph
Click a box for its facts and evidenceThe on-chain account, field and slot a fact was read from, with a link to check it on Solscan.. Arrows point from who holds a power to what it controls. Controllers shared across protocols
Loading the interactive graph…
List view
- Key Single key 7dGb…Crar High
- can freeze · no delay → USDC
- Key Single key BJE5…5ruG High
- can mint · no delay → USDC
- Multisig Squads 4 of 7 · 600 s delay CxnE…unP1 Medium
- Program Store Gmso…ucLo Medium
- core program → GMX Solana
- ← Squads 4 of 7 · 600 s delay can upgrade · 600 s delay
- Admin account authority CTDL…o8bN Medium
- admin account → GMX Solana
- ← Squads 4 of 7 · 600 s delay can change parameters · 600 s delay
- Token USDC EPjF…Dt1v High
- used as deposit → GMX Solana
- ← Single key can freeze · no delay
- ← Single key can mint · no delay
- Token SOL So11…1112 Low
- used as deposit → GMX Solana
- Protocol GMX Solana Stage 0.
Permissions
Single key 7dGb…Crar
Show in control graph| Power | Over | Delay | Evidence |
|---|---|---|---|
| Freeze tokens | USDC (Circle) | no delay |
|
Single key BJE5…5ruG
Show in control graph| Power | Over | Delay | Evidence |
|---|---|---|---|
| Mint tokens | USDC (Circle) | no delay |
|
Squads 4 of 7 · 600 s delay CxnE…unP1
Show in control graph| Power | Over | Delay | Evidence |
|---|---|---|---|
| Upgrade the code | Store | 600 s delay | |
| Change parameters | authority on CTDL…o8bN | 600 s delay |
Held by no one
- Freeze tokens: SOL (Solana (native mint)) (renounced or immutable)
- Mint tokens: SOL (Solana (native mint)) (renounced or immutable)
Programs
| Program | Role | Loader | Upgrade controller | Verification | Last upgrade |
|---|---|---|---|---|---|
| Store Gmso…ucLo | Core | Upgradeable loader | Squads 4 of 7 · 600 s delay | Verified build (8af1e70) | 2026-10-21 |
Upgrades & governance
- Upgrades
- 10
- Last upgrade
- 2026-10-21
- Average interval
- 67.3 days
- Last 30 days
- 1
- 2026-10-21 Upgraded Store tx TBtf…nvBT
- 2026-10-21 Program data extended Store tx 4V84…wS9p
- 2026-08-12 Upgraded Store tx 4uCg…tZLu
- 2026-03-19 Upgraded Store tx 2iwm…mD7g
- 2026-02-11 Upgraded Store tx 2sZC…hB1c
- 2025-10-20 Upgraded Store tx vEB9…b7wK
- 2025-08-14 Upgraded Store tx cw5o…M6eP
- 2025-08-05 Upgraded Store tx 2Ljv…Gr9Z
- 2025-08-05 Program data extended Store tx 3nZW…uy9S
- 2025-08-05 Program data extended Store tx C4bg…1yWZ
- 2025-06-22 Upgraded Store tx 64P1…rJRj
- 2025-06-22 Program data extended Store tx 3ueV…iR1p
- 2025-06-22 Program data extended Store tx Ari8…VAZn
- 2025-03-08 Upgraded Store tx 3PeS…jgih
- 2025-03-08 Program data extended Store tx 5QCu…Dyaq
- 2025-03-08 Program data extended Store tx 4ymi…1rBK
- 2025-02-22 Upgraded Store tx iuTY…7TBG
- 2025-02-22 Program data extended Store tx 3Ush…oatc
- 2025-02-22 Program data extended Store tx 5WVg…y22B
- 2025-02-11 Authority changed Store tx 1i3E…UBQc
- 2025-02-11 Deployed Store tx 4is5…e8MJ
Updates
No changes have been recorded for this protocol since tracking began.
Dependencies and sources
Called programs
- Gt9S…ZA3c Unrecognized High
Registry sources
- admin authority CTDL…o8bN source
- multisig Squads v4 CxnE…unP1 source
- multisig Squads v4 CxnE…unP1 source
- program Store Gmso…ucLo source
Registry entry last reviewed 2026-10-19 by celebtir-loop-draft. Report an error · Markdown version