Compound Open Oracle Audit

Off-Chain (Private)

Audited on 2020/02/11

No active critical issues

Summary

price for the asset. Audit history and current scope In this audit we looked into all Solidity contracts inside the Compound Open Oracle System repository. The audited commit is e7a928334e5e454a88eec38e4ee1be5ee3b13f08. The exact files included in this scope are: contracts/DelFiPrice.sol contracts... /OpenOracleData.sol contracts/OpenOraclePriceData.sol contracts/OpenOracleView.sol All off-chain systems related to the Open Oracle were left out of scope. Moreover, we did not audit the oracle’s integration with Compound nor any other project in the ecosystem. We have previously audited several phases...

Project

Compound

Multi-Chain

Issues (9)

	Low	Medium	High	Critical	Total
Not fixed	4	4	1	-	9
Fixed	-	-	-	-	0
Total	4	4	1	0	9

Contracts (4)

#	File Name
1	contracts/OpenOracleData.sol
2	contracts/OpenOracleView.sol
3	contracts/OpenOraclePriceData.sol
4	contracts/DelFiPrice.sol

#	File Name
1	contracts/OpenOracleData.sol
2	contracts/OpenOracleView.sol
3	contracts/OpenOraclePriceData.sol
4	contracts/DelFiPrice.sol

Compound Open Oracle Audit

Summary

Issues (9)

[H01] Inconsistencies in stored data may lead to incorrect median pricenot_fixed/high

[M01] Potentially inaccurate median price during sudden, extreme, price variationsnot_fixed/medium

[M02] Lack of minimum sample size requirement for official price calculationnot_fixed/medium

[M03] Function put allows storing invalid signed datanot_fixed/medium

[M04] Oracle might fail if anchor price is not updated fast enoughnot_fixed/medium

Contracts (4)