Compound Open Oracle Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Compound (Compound Open Oracle Audit) on 11 Feb 2020: 9 findings, 0 critical; none marked fixed.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 4 | 0 | 0 |
| Low | 4 | 0 | 0 |
High[H01] Inconsistencies in stored data may lead to incorrect median priceOpen
The report gives no description here.
Medium[M01] Potentially inaccurate median price during sudden, extreme, price variationsOpen
The report gives no description here.
Medium[M02] Lack of minimum sample size requirement for official price calculationOpen
The report gives no description here.
Medium[M03] Function put allows storing invalid signed dataOpen
The report gives no description here.
Medium[M04] Oracle might fail if anchor price is not updated fast enoughOpen
The report gives no description here.
Low[L01] Commented out codeOpen
The report gives no description here.
Low[L02] Lack of indexed parameters in eventsOpen
The report gives no description here.
Low[L03] Incomplete docstringsOpen
The report gives no description here.
Low[L04] Use of magic constantsOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- contracts/OpenOracleData.sol
- contracts/OpenOracleView.sol
- contracts/OpenOraclePriceData.sol
- contracts/DelFiPrice.sol
Part of Compound’s security record
CompoundSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us