RageTrade/Core

QuantstampFiles named in the report

Audit

Quantstamp reviewed RageTradeCore (RageTrade/Core) on 15 Jun 2022: 15 findings, 0 critical; 13 marked fixed, 2 open.

No open critical findings
Open the reportOpen RageTradeCore’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium002
Low209
LowPrivileged Roles and OwnershipOpen

Smart contracts will often have `owner` variables to designate the person with special privileges to make modifications to the smart contract. The `ClearingHouse.sol` contract contains the following privileged roles: - `_governance` and `_teamMultisig`, as initialized during the constructor: - Renounce the role(s) and thereby disable all followingly listed actions, by calling `transferGovernance()` and `transferTeamMultisig()` with a known uncontrolled non-zero address. - Assign an arbitrary address as new `_governance` or `_teamMultisig`, by calling `transferGovernance()` and `transferTeamMultisig()`, respectively. - Modify collateral settings, by calling `updateCollateralSettings()`. - Modify pool settings, by calling `updatePoolSettings()`. - Modify protocol settings, by calling `updateProtocolSettings()`. - Putting the contract in and out of the paused state, by calling `pause()`/`unpause()`. - `rageTradeFactoryAddress`, as initialized during `initialize()`: - Register new pools, by calling `registerPool()`.

LowUnlocked PragmaOpen

Every Solidity file specifies in the header a version number of the format `pragma solidity (^)0.8.*`. The caret (`^`) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version _and above_, hence the term "unlocked". Further, while for the most part, the pragma is ^0.8.9, the following contracts use a different pragma: * In `./extloads/ClearingHouseExtsload.sol`, it is `^0.8.0`. * In `./interfaces/IExtsload.sol`, it is `>=0.5.0`. * In `./libraries/Account.sol`, it is `^0.8.10`. * In `./libraries/Bytes32.sol`, it is `^0.8.0`. * In `./libraries/Protocol.sol`, it is `^0.8.0`. * In `./libraries/SafeCast.sol`, it is `^0.8.0`. * In `./libraries/SignedFullMath.sol`, it is `>=0.8.0`. * In `./utils/Multicall.sol`, it is `>=0.7.6`. * In `./utils/TimelockControllerWithMinDelayOverride.sol`, it is `^0.8.0`.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (103)

  • contracts/protocol/tokens/VTokenDeployer.sol
  • contracts/libraries/Protocol.sol
  • contracts/test/Uint32L8ArrayTest.sol
  • contracts/test/mocks/UniswapV3PoolMock.sol
  • contracts/lens/SwapSimulator.sol
  • contracts/protocol/tokens/VQuote.sol
  • contracts/test/mocks/ArbSysMock.sol
  • contracts/libraries/SwapMath.sol
  • contracts/test/ClearingHouseTest.sol
  • contracts/test/mocks/ClearingHouseDummy.sol
  • contracts/libraries/SafeCast.sol
  • contracts/libraries/Bisection.sol
  • contracts/libraries/CollateralDeposit.sol
  • contracts/libraries/SignedMath.sol
  • contracts/libraries/GoodAddressDeployer.sol
  • contracts/libraries/TickExtended.sol
  • contracts/libraries/VTokenPositionSet.sol
  • contracts/libraries/Uint48.sol
  • contracts/protocol/clearinghouse/ClearingHouse.sol
  • contracts/libraries/Block.sol
  • contracts/test/ClearingHouseExtsloadTest.sol
  • contracts/test/AccountTest.sol
  • contracts/libraries/Account.sol
  • contracts/libraries/SignedFullMath.sol
  • contracts/extsloads/ClearingHouseExtsload.sol
  • contracts/interfaces/clearinghouse/IClearingHouseActions.sol
  • contracts/test/mocks/OracleMock.sol
  • contracts/test/VTokenPositionSetTest.sol
  • contracts/test/mocks/VPoolWrapperMock2.sol
  • contracts/protocol/wrapper/VPoolWrapper.sol
  • contracts/libraries/WordHelper.sol
  • contracts/test/BisectionTest.sol
  • contracts/interfaces/IInsuranceFund.sol
  • contracts/test/mocks/AccountProtocolInfoMock.sol
  • contracts/test/LiquidityPositionTest.sol
  • contracts/interfaces/IGovernable.sol
  • contracts/interfaces/IVQuote.sol
  • contracts/test/mocks/RealTokenMock.sol
  • contracts/test/BatchedLoopTest.sol
  • contracts/test/FundingPaymentTest.sol
  • contracts/test/ExtsloadTest.sol
  • contracts/test/VTokenPositionSetTest2.sol
  • contracts/utils/TimelockControllerWithMinDelayOverride.sol
  • contracts/interfaces/IVToken.sol
  • contracts/libraries/Uint48L5Array.sol
  • contracts/test/CollateralDepositSetTest.sol
  • contracts/interfaces/clearinghouse/IClearingHouseSystemActions.sol
  • contracts/libraries/UniswapV3PoolHelper.sol
  • contracts/libraries/LiquidityPositionSet.sol
  • contracts/test/LiquidityPositionSetTest.sol
  • contracts/oracles/ChainlinkOracle.sol
  • contracts/utils/Multicall.sol
  • contracts/utils/constants.sol
  • contracts/test/WordHelperTest.sol
  • contracts/interfaces/IVPoolWrapper.sol
  • contracts/test/mocks/VPoolWrapperMock.sol
  • contracts/libraries/LiquidityPosition.sol
  • contracts/test/Uint48L5ArrayTest.sol
  • contracts/protocol/insurancefund/InsuranceFundDeployer.sol
  • contracts/test/mocks/MockAggregatorV2.sol
  • contracts/libraries/SimulateSwap.sol
  • contracts/libraries/VTokenPosition.sol
  • contracts/utils/Extsload.sol
  • contracts/test/Governable.sol
  • contracts/protocol/insurancefund/InsuranceFund.sol
  • contracts/test/SimulateSwapTest.sol
  • contracts/interfaces/clearinghouse/IClearingHouseStructures.sol
  • contracts/protocol/clearinghouse/ClearingHouseStorage.sol
  • contracts/lens/ClearingHouseLens.sol
  • contracts/interfaces/clearinghouse/IClearingHouseCustomErrors.sol
  • contracts/test/TickExtendedTest.sol
  • contracts/protocol/wrapper/VPoolWrapperDeployer.sol
  • contracts/interfaces/IOracle.sol
  • contracts/test/TimelockControllerWithMinDelayOverrideTest.sol
  • contracts/interfaces/clearinghouse/IClearingHouseView.sol
  • contracts/libraries/TickBitmapExtended.sol
  • contracts/libraries/FundingPayment.sol
  • contracts/protocol/RageTradeFactory.sol
  • contracts/interfaces/IExtsload.sol
  • contracts/libraries/Uint32L8Array.sol
  • contracts/libraries/AddressHelper.sol
  • contracts/protocol/tokens/VToken.sol
  • contracts/interfaces/IClearingHouse.sol
  • contracts/test/mocks/VPoolWrapperMockRealistic.sol
  • contracts/utils/Governable.sol
  • contracts/test/Uint48Test.sol
  • contracts/oracles/SettlementTokenOracle.sol
  • contracts/test/PriceMathTest.sol
  • contracts/protocol/clearinghouse/ClearingHouseDeployer.sol
  • contracts/test/SignedMathTest.sol
  • contracts/libraries/PriceMath.sol
  • contracts/utils/ProxyAdminDeployer.sol
  • contracts/protocol/clearinghouse/ClearingHouseView.sol
  • contracts/interfaces/clearinghouse/IClearingHouseEnums.sol
  • contracts/libraries/BatchedLoop.sol
  • contracts/test/GoodAddressDeployerTest.sol
  • contracts/protocol/tokens/VQuoteDeployer.sol
  • contracts/test/mocks/RealTokenMock1.sol
  • contracts/test/SignedFullMathTest.sol
  • contracts/test/VTokenPositionTest.sol
  • contracts/test/mocks/SettlementTokenMock.sol
  • contracts/interfaces/clearinghouse/IClearingHouseEvents.sol
  • contracts/interfaces/clearinghouse/IClearingHouseOwnerActions.sol

Part of RageTradeCore’s security record

RageTradeCore
Audits1 audit by 1 firmLast audit Jun 2022, by Quantstamp.
Critical findingsNo open critical findingsIn 1 report.
Open RageTradeCore’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us