Rari Capital (On-chain Governance)
Quantstamp reviewed Rari Capital (Rari Capital (On-chain Governance)) on 2 Jul 2021: 8 findings, 0 critical; 4 marked fixed, 3 acknowledged, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 1 | 3 | 2 |
LowInconsistency Use of `minPeriod` In `_workable` and `_updateable`Acknowledged
When checking the timestamp of the most recent observation, `_workable` uses the following expression: `... > (minPeriod >= MIN_TWAP_TIME ? minPeriod : MIN_TWAP_TIME)`, whereas `_updateable` does not consider `minPeriod`, only referring to `MIN_TWAP_TIME`.
LowUnchecked Function ArgumentsAcknowledged
1. `ChainlinkPriceOracleV2.constructor` should ensure that `_admin` is non-zero. 2. `ChainlinkPriceOracleV2.changeAdmin` should ensure that `newAdmin` is non-zero, unless this is intended to revoke privileged roles. 3. `UniswapV3TwapPriceOracle.constructor` should ensure that `_uniswapV3Factory` is non-zero. 4. `RariGovernanceToken.upgrade2()` all input addresses should be validated correctly. 5. `UniswapTwapPriceOracle.constructor()` should ensure that all addresses are valid.
LowUnused Constant `TokenErrorReporter.UTILIZATION_ABOVE_MAX`Acknowledged
The constant `UTILIZATION_ABOVE_MAX` is newly defined, but it is not used anywhere.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (66)
- contracts/CErc20Delegator.sol
- contracts/Governance/GovernorAlpha.sol
- contracts/CEtherDelegate.sol
- AggregatorV3Interface.sol
- IUniswapV2Router02.sol
- contracts/CErc20.sol
- CToken.sol
- contracts/ErrorReporter.sol
- contracts/CarefulMath.sol
- ICurveLiquidityGaugeV2.sol
- contracts/CErc20Delegate.sol
- contracts/CEtherDelegator.sol
- contracts/Lens/CompoundLens.sol
- contracts/Governance/Comp.sol
- ICurveRegistry.sol
- IUniswapV2Router01.sol
- contracts/CEtherImmutable.sol
- contracts/Unitroller.sol
- RariGovernanceToken.sol
- UniswapTwapPriceOracleRoot.sol
- contracts/CTokenInterfaces.sol
- Comptroller.sol
- IUniswapV2Pair.sol
- contracts/CDaiDelegate.sol
- contracts/Timelock.sol
- Unitroller.sol
- contracts/ComptrollerInterface.sol
- IVault.sol
- IVaultV2.sol
- contracts/SafeMath.sol
- contracts/CErc20Immutable.sol
- ChainlinkPriceOracle.sol
- contracts/ComptrollerG1.sol
- UniswapV2Library.sol
- contracts/Comptroller.sol
- CurveLpTokenPriceOracle.sol
- IUniswapV2Factory.sol
- FixedEthPriceOracle.sol
- contracts/InterestRateModel.sol
- contracts/CEther.sol
- ICurvePool.sol
- ChainlinkPriceOracleV2.sol
- BasePriceOracle.sol
- FixedEurPriceOracle.sol
- contracts/ComptrollerStorage.sol
- contracts/JumpRateModel.sol
- IUniswapV2Callee.sol
- contracts/Exponential.sol
- contracts/DAIInterestRateModelV2.sol
- CurveLiquidityGaugeV2PriceOracle.sol
- contracts/SimplePriceOracle.sol
- contracts/EIP20Interface.sol
- contracts/CToken.sol
- YVaultV2PriceOracle.sol
- contracts/WhitePaperInterestRateModel.sol
- UniswapTwapPriceOracle.sol
- IWETH.sol
- UniswapV3TwapPriceOracle.sol
- CErc20.sol
- CEther.sol
- contracts/IFuseFeeDistributor.sol
- contracts/EIP20NonStandardInterface.sol
- PriceOracle.sol
- contracts/PriceOracle.sol
- contracts/Maximillion.sol
- MasterPriceOracle.sol
Part of Rari Capital’s security record
Security firm
Quantstamp236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us