Open Dollar - dApp

QuantstampRepository at commit 07ba83f

Audit

Quantstamp reviewed Open Dollar (Open Dollar - dApp) on 11 Apr 2024: 8 findings, 0 critical; 3 marked fixed, 4 acknowledged, 1 open.

No open critical findings
Open the reportOpen Open Dollar’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low143
LowApplication Fails with Generic Error Messages Making It Hard to Know What Went WrongAcknowledged

Occasionally, the application will return a generic error to the user stating that the transaction failed. This does not provide the user with any knowledge about what went wrong; this negatively affects the user experience.

LowBorrowing Amount Is Limited by UI only 3 Digits Are AllowedAcknowledged

When the user supplies value into the deposit, borrow, or repay section, the OpenDollar front-end limits the maximum supplied amount by 3 digit entry.

LowThe UI/UX Issue, the Application Does Not Clear DigitsAcknowledged

When the user supplies the deposited or borrowed amounts as a float number (eg. 999,000) the UI does not allow clearing out the fraction part. This makes user experience troubleshooting.

LowWeak HSTS ConfigurationAcknowledged

HTTP Strict Transport Security (HSTS) policy is a setting that requires all communications with the service to use an HTTPS encrypted channel. Browsers know that a site has an HSTS policy set either through the HSTS preload list, https://hstspreload.org/, or because the site has HSTS in its headers. If a site does not have an HSTS policy set, then the user may browse to the HTTP version of the site first and thus be vulnerable to a man-in-the-middle (MITM) redirection to a malicious site rather than the legitimate site. The Strict-Transport-Security HTTP header was not fully configured in application responses when a request was issued to the server. Consequently, clients will not prevent downgraded requests to bot.dev.opendollar.com, app.dev.opendollar.com.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (345)

  • https://github.com/open-dollar/od-app/src/model/connectWalletModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/index.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icons/favicon.ico at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/staking.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/SettingsIcon.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Modals/AuctionsModal.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AuctionsOperations/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/VaultList.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/SafeIcon.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/BalanceUpdater.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Images/ConnectWalletImage.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/ttm-img.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/Lotties/wallet.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/splash/discord.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/WalletModal/PendingView.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/magic.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/index.html at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/i18n/en.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useTokenApproval.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/App.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icons/logo512.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/PageHeader.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/ImagePreloader.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/safes.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/cypress.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/Lotties/register.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/FeatherIconWrapper.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/od-logo.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/BidLine.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/react-app-env.d.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/connectors/metamask.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/solidity/cache/solidity-files-cache.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/usePrevious.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/caret-up.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Transaction.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/LinkButton.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/blueish-bg.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/splash/partly-cloudy.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/logo192.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/connectors/walletConnectV2.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/curve.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Analytics/DataCard.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/types/auctions.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/cypress/integration/landing-no-safes.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/cypress/integration/safe-details.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Pagination.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Steps.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/splash/liquid-eth.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/connectors/gnosisSafe.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/StepsContent.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useContract.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/api.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AddressLink.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AuctionsOperations/AuctionsPayment.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/connectWalletModel.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Images/CreateAccountImage.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icons/apple-touch-icon.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/connectorCards/Card.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/getLibrary.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Confetti/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useAuctions.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/multicallModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/package.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/boxes.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/BlockedAddress.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/ArrowDown.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/ConnectedWalletInfo.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/connectorCards/CoinbaseWalletCard.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/NavLinks.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Footer.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Modals/ScreenLoader.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/ApplicationUpdater.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/wrapEth/TxConfirmation.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/plus.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/od-logo192w.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/claim.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icons/site.webmanifest at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/blockchain.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/.github/workflows/document-issue.yml at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useBlocksConfirmations.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/CreateVault.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/Identicon.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/robots.txt at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/CustomTooltip.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/abis/erc20_bytes32.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-vault.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/abis/erc20.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-logo.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AuctionsOperations/AuctionsTransactions.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/index.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/splash/partly-cloudy.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/footer-bg-art.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/stn-img.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/Lotties/vault.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-colorloop.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/mine.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/transactionsModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/ErrorBoundary.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Modals/Modal.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/craco.config.js at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/CNAME at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/i18n/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/.yarn/releases/yarn-3.2.3.cjs at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/Uniswap.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Splash.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/logo512.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/incentive.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/themes/dark.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/setupTests.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-logo192w.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useSafe.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/arrow.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icons/mstile-150x150.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/connectors/network.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/VaultHeader.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-logo.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useDebounce.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/VaultDetails.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/ModifyVault.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/.gitignore at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Auctions/AuctionsList.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useActiveWeb3React.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/.prettierrc.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Web3ReactManager/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/serviceWorker.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/connectors/arrow-right.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/TransactionHooks.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/uniswap-icon.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/flx-logo.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/abis/SimpleStakingContract.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/contractsDescription.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/settingsModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/od-wallet-icon.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/.github/actions/setup_earthly/action.yml at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/wrapEth/Wrap.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/flx_uni_hai.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/abi.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Dropdown.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/i18n/de.json at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/checkSanctions.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Loader.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/CookieBanner.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/.dockerignore at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/Accounts.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/Sheild.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/splash/optimism.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/.github/workflows/document-pr.yml at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/sell-od.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/queries.js at commit 07ba83f
  • https://github.com/open-dollar/od-app/cypress/integration/landing-safes.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Analytics/GoogleTagManager.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/NotificationPopup.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/debt.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Modals/ConnectedWalletModal.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Auctions/CollateralAuctions/CollateralAuctionsList.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AuctionsOperations/Results.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Auctions/CollateralAuctions/CollateralAuctionBlock.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/cypress/support/commands.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/public/icon.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/validations.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/helper.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/CheckBox.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/connectors/metaMask.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/services/TransactionUpdater.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AlertLabel.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/abis/common.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/TransactionSpinner.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/README.md at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/retry.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/transactionModel.test.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/Dockerfile at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Deposit/DepositFunds.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/stETH.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Images/OpenSafeImage.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/ConnectWithSelect.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/op-img.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Shared.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Vaults/Stats.js at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/staking.png at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/assets/arrow-up.svg at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/hooks/useQuery.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/BlockBodyContainer.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/graph.js at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/AuctionsFAQ.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/VaultManager.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/LoadingIcon.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/yarn.lock at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/auctionModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Auctions/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/ToastPayload.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/removeDecimals.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/chunkArray.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/utils/wrapEther.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Icons/CopyIcon.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/model/popupsModel.ts at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/containers/Analytics/index.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/.github/workflows/check-reminder.yml at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/Modals/WETHModal.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/components/connectorCards/MetaMaskCard.tsx at commit 07ba83f
  • https://github.com/open-dollar/od-app/src/index.tsx at commit 07ba83f

Part of Open Dollar’s security record

Open Dollar
Audits3 audits by 2 firmsLast audit Apr 2024, by Quantstamp.
Critical findingsNo open critical findingsAcross 3 reports.
Open Open Dollar’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us