Compound Comprehensive Protocol Audit
Summary
in the following sections organized by severity. Critical Severity Anyone can steal money from other suppliers in TUSD market by creating negative interest rates Auditor’s note: The bug behind this issue was first privately reported by the ChainSecurity team during their audit of the CToken Refactors... of scope for the current audit, but oracle upgrades may be reviewed in future proposal audits. Assets: every cToken is coupled with an underlying asset (either Ether or an ERC20 token). Market listings for new assets are proposed by the community through governance proposals. It is very important...
Issues (11)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 10 | - | - | 1 | 11 |
Fixed | - | - | - | - | 0 |
| Total | 10 | 0 | 0 | 1 | 11 |
Contracts (19)
| # | File Name |
|---|---|
| 1 | contracts/CErc20.sol |
| 2 | contracts/CTokenInterfaces.sol |
| 3 | contracts/CToken.sol |
| 4 | contracts/PriceOracle.sol |
| 5 | contracts/CEther.sol |
| 6 | contracts/Unitroller.sol |
| 7 | contracts/Comptroller.sol |
| 8 | contracts/EIP20Interface.sol |
| 9 | contracts/ComptrollerInterface.sol |
| 10 | contracts/ComptrollerStorage.sol |