Compound Alpha Governance System Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Compound (Compound Alpha Governance System Audit) on 25 Feb 2020: 11 findings, 0 critical; 1 marked fixed, 10 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 3 | 0 | 0 |
| Low | 6 | 0 | 0 |
High[H01] Approved proposal may be impossible to queue, cancel or executeOpen
The report gives no description here.
Medium[M01] GovernorAlpha contract does not fully match specificationOpen
The report gives no description here.
Medium[M02] Lack of allowance front-running mitigation in ERC20 tokenOpen
The report gives no description here.
Medium[M03] Proposal execution not handling returned dataOpen
The report gives no description here.
Low[L01] Lack of indexed parameters in eventsOpen
The report gives no description here.
Low[L02] Storage modification in require statementOpen
The report gives no description here.
Low[L03] Missing docstringsOpen
The report gives no description here.
Low[L04] Lack of input validationOpen
The report gives no description here.
Low[L05] Not declaring return types in functions with return statementsOpen
The report gives no description here.
Low[L06] Undocumented, untested, custom behavior in transfer of ERC20 tokenOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- DAIInterestRateModel.sol
- Timelock.sol
- Comp.sol
- GovernorAlpha.sol
- CDaiDelegate.sol
Part of Compound’s security record
CompoundSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us