dForce Lending Protocol Review
Summary
Executive Summary From March to April 2021, ConsenSys Diligence engaged with dForce to review the dForce Lending Protocol: a pool-based lending platform and stable debt protocol. We conducted this assessment from March 8 to April 9, 2021, and allocated 8 person-weeks over that period. Scope Our review focused on the commit hash 419c2a1e00a74a0590a2e05a959a7c053de4181c. For the most part, the Solidity files at the given commit were in scope. However, one major component was NOT in scope: the pricing oracle implementation, PriceOracle.
Issues (12)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 6 | 4 | 2 | - | 12 |
Fixed | - | - | - | - | 0 |
| Total | 6 | 4 | 2 | 0 | 12 |
Contracts (29)
| # | File Name |
|---|---|
| 1 | interface/IPriceOracle.sol |
| 2 | iToken.sol |
| 3 | library/Initializable.sol |
| 4 | library/ReentrancyGuard.sol |
| 5 | RewardDistributor.sol |
| 6 | interface/IInterestRateModelInterface.sol |
| 7 | iETH.sol |
| 8 | TokenBase/TokenAdmin.sol |
| 9 | TokenBase/Base.sol |
| 10 | TokenBase/TokenERC20.sol |