Lendroid Protocol version 1.0

Off-Chain (Private)

Audited on 2019/10/16

No active critical issues

Summary

Quantstamp discovered several medium risk issues that required attention. The Lendroid team has addressed these issues and Quantstamp updated the report accordingly. The Solidity implementation was used to compare and verify business logic. This audit report is limited to the Vyper code. The Solidity implementation contains additional issues that Quantstamp discovered. It should not be considered audited and should not be (even partially) deployed.

Project

Lendroid Whalestreet

Ethereum

No active critical issues

Issues (15)

	Low	Medium	High	Critical	Total
Not fixed	4	-	-	-	4
Fixed	5	6	-	-	11
Total	9	6	0	0	15

Contracts (2)

#	File Name
1	contracts/ERC20.v.py
2	contracts/protocol.v.py

#	File Name
1	contracts/ERC20.v.py
2	contracts/protocol.v.py

Lendroid Protocol version 1.0

Summary

Issues (15)

Allowance Double-Spend Exploitnot_fixed/low

Block Timestamp Manipulationnot_fixed/low

Owner Can Whitelist Tokens, Whitelist Wranglers, and Set Position Threshold (Centralization of Power)not_fixed/low

Owner can withdraw deposited collateral (Centralization of Power)not_fixed/low

Contracts (2)