Compound III

ChainSecurityCode version: not recorded (see the report)

ChainSecurity reviewed Compound (Compound III) on 30 May 2022: 20 findings, 0 critical; 13 marked fixed, 7 acknowledged.

No open critical findings
Open the reportOpen Compound’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium043
Low039
MediumAllowances Enable Management of Both Base Tokens and Collateral AssetsAcknowledged

The report gives no description here.

Mediumapprove Only Allows the Values 0 and MAXAcknowledged

The report gives no description here.

MediumbaseBorrowMin Is Not Enforced for Destination of TransferAcknowledged

The report gives no description here.

MediumOracle Timestamps Not CheckedAcknowledged

The report gives no description here.

LowBalances Can Be OverflowedAcknowledged

The report gives no description here.

LowtargetReserves Limit in buyCollateral Can Be CircumventedAcknowledged

The report gives no description here.

LowTracking Indices May Overflow on Large Tracking Speed ValuesAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Compound’s security record

Compound
Audits21 audits by 4 firmsLast audit Jul 2026, by ChainSecurity.
Critical findings1 open critical findingReported in “Compound Comprehensive Protocol Audit” by OpenZeppelin, Mar 2022. Not marked fixed in that report.
IncidentIncident 29 Sep 2021Source: De.Fi incident database.
Open Compound’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Nov 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us