cToken (unredacted)

ChainSecurity26 Nov 2021Code version: not recorded (see the report)

ChainSecurity reviewed Compound (cToken (unredacted)) on 26 Nov 2021: 15 findings, 1 critical; 8 marked fixed, 7 acknowledged.

1 critical finding, fixed

Open the report Open Compound’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	0	0
Medium	0	1	2
Low	0	6	5

MediumReentrancy to Circumvent Liquidation ProtectionAcknowledged

The report gives no description here.

LowDeprecation Insufficiently DocumentedAcknowledged

The report gives no description here.

LowExtra Encoding and Decoding in CErc20DelegatorAcknowledged

The report gives no description here.

LowExtra Storage OperationsAcknowledged

The report gives no description here.

LowNo Dynamic Bounds on Liquidation IncentiveAcknowledged

The report gives no description here.

LowReentrancy by AdminAcknowledged

The report gives no description here.

LowUnnecessary Memory CopiesAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Compound’s security record

Compound

Audits21 audits by 4 firmsLast audit Jul 2026, by ChainSecurity.

Critical findings1 open critical findingReported in “Compound Comprehensive Protocol Audit” by OpenZeppelin, Mar 2022. Not marked fixed in that report.

IncidentIncident 29 Sep 2021Source: De.Fi incident database.

Open Compound’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Nov 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.