cToken (unredacted)

ChainSecurity26 Nov 2021Code version: not recorded (see the report)

ChainSecurity reviewed Compound (cToken (unredacted)) on 26 Nov 2021: 15 findings, 1 critical; 8 marked fixed, 7 acknowledged.

1 critical finding, fixed

Open the report Open Compound’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	0	0
Medium	0	1	2
Low	0	6	5

CriticalAnyone Can Disable TUSD MarketFixed

The report gives no description here.

MediumIncorrect Exchange Rates Due to Incorrect AccountingFixed

The report gives no description here.

MediumIncorrect Return Value for mintFreshFixed

The report gives no description here.

LowIgnored Return ValuesFixed

The report gives no description here.

LowLiquidation Incentive Has Imprecise DocumentationFixed

The report gives no description here.

LowSpecial Case Not Clearly SpecifiedFixed

The report gives no description here.

LowUnclear SpecificationFixed

The report gives no description here.

LowUnnecessary Overflow ChecksFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Compound’s security record

Compound

Audits21 audits by 4 firmsLast audit Jul 2026, by ChainSecurity.

Critical findings1 open critical findingReported in “Compound Comprehensive Protocol Audit” by OpenZeppelin, Mar 2022. Not marked fixed in that report.

IncidentIncident 29 Sep 2021Source: De.Fi incident database.

Open Compound’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Nov 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.