Compound Comprehensive Protocol Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Compound (Compound Comprehensive Protocol Audit) on 21 Mar 2022: 11 findings, 1 critical; none marked fixed.
1 open critical finding
Open the reportOpen Compound’s security record
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 10 | 0 | 0 |
No acknowledged finding in this report.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (19)
- contracts/CErc20.sol
- contracts/CTokenInterfaces.sol
- contracts/CToken.sol
- contracts/PriceOracle.sol
- contracts/CEther.sol
- contracts/Unitroller.sol
- contracts/Comptroller.sol
- contracts/EIP20Interface.sol
- contracts/ComptrollerInterface.sol
- contracts/ComptrollerStorage.sol
- contracts/Governance/Comp.sol
- contracts/Governance/GovernorBravoDelegator.sol
- contracts/EIP20NonStandardInterface.sol
- contracts/ExponentialNoError.sol
- contracts/Governance/GovernorBravoDelegate.sol
- contracts/InterestRateModel.sol
- contracts/CErc20Delegate.sol
- contracts/Governance/GovernorBravoInterfaces.sol
- contracts/ErrorReporter.sol
Part of Compound’s security record
CompoundAudits21 audits by 4 firmsLast audit Jul 2026, by ChainSecurity.
Critical findings1 open critical findingReported in “Compound Comprehensive Protocol Audit” by OpenZeppelin, Mar 2022. Not marked fixed in that report.
IncidentIncident 29 Sep 2021Source: De.Fi incident database.
Open Compound’s security recordSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us