Compound Open Price Feed
OpenZeppelin reviewed Compound (Compound Open Price Feed) on 17 Jul 2020: 17 findings, 0 critical; none marked fixed.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 4 | 0 | 0 |
| Low | 13 | 0 | 0 |
Medium[M01] Convoluted price update mechanism once reporter is invalidatedOpen
The report gives no description here.
Medium[M02] Inconsistent behavior when anchor price is zeroOpen
The report gives no description here.
Medium[M03] Unexpected behavior when retrieving the underlying price of a cTokenOpen
The report gives no description here.
Medium[M04] Incorrect event emissionOpen
The report gives no description here.
Low[L01] Initial configured markets might not be Uniswap V2 pairsOpen
The report gives no description here.
Low[L02] Immature time-weighted average prices could be used as anchorsOpen
The report gives no description here.
Low[L03] Implicit structure for reporter invalidation messageOpen
The report gives no description here.
Low[L04] Unnecessary event emission after replay of reporter invalidationOpen
The report gives no description here.
Low[L05] Not failing early when posting a non-reportable priceOpen
The report gives no description here.
Low[L06] Potentially unsafe arithmetic operationsOpen
The report gives no description here.
Show 7 more
Low[L07] Precision loss in fixed point libraryOpen
The report gives no description here.
Low[L08] Shortcomings in testing practicesOpen
The report gives no description here.
Low[L09] Lack of indexed parameters in eventsOpen
The report gives no description here.
Low[L10] Lack of event emissionsOpen
The report gives no description here.
Low[L11] Missing docstringsOpen
The report gives no description here.
Low[L12] Erroneous commentsOpen
The report gives no description here.
Low[L13] Constructor’s parameter order does not match specificationOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- contracts/Uniswap/UniswapAnchoredView.sol
- contracts/Uniswap/UniswapConfig.sol
- contracts/Uniswap/UniswapLib.sol
Part of Compound’s security record
CompoundSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us