RToken Ethereum Contracts
Summary
Quantstamp has audited the security of the RToken Ethereum Contracts and has identified a number of issues, several of which are of undetermined severity. The quality and security of this project is overall superior to what we commonly see. However, we do recommend that the issues of high down to low severity are addressed before this code is deployed in production. Some of the more concerning issues are the integer overflow and underflow that occur in several locations in the code, as well as the possible transfer to 0x0. NOTE: For this security audit, Quantstamp has not audited the contracts located in the `compound/` folder. However, we do note that those contracts have been audited by other third parties and all indicated issues have been resolved. **Update:** Quantstamp confirms that the most severe issues found during the audit have been fixed in the update of the code that we have reaudited.
Issues (9)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 4 | - | - | - | 4 |
Fixed | 3 | 1 | 1 | - | 5 |
| Total | 7 | 1 | 1 | 0 | 9 |