Compound Alpha Governance System Audit

Off-Chain (Private)

Audited on 2020/02/25

No active critical issues

Summary

Compound Finance is a protocol deployed on the Ethereum network for automatic, permissionless, loans of Ether and various ERC20 tokens. It is one of the most widely used decentralized finance systems in the ecosystem. Audit history and current scope In this audit, we looked into Compound’s alpha... version of their governance system and its associated COMP token. While the initial audited commit is 6858417c91921208c0b3ff342b11065c09665b1b, later the Compound team provided a follow-up commit f5976a8a1dcf4e14e435e5581bade8ef6b5d38ea which fixed some of the issues identified in the original commit...

Project

Compound

Multi-Chain

Issues (11)

	Low	Medium	High	Critical	Total
Not fixed	6	3	-	-	9
Fixed	-	-	2	-	2
Total	6	3	2	0	11

Contracts (5)

#	File Name
1	Timelock.sol
2	Comp.sol
3	GovernorAlpha.sol
4	DAIInterestRateModel.sol
5	CDaiDelegate.sol

#	File Name
1	Timelock.sol
2	Comp.sol
3	GovernorAlpha.sol
4	DAIInterestRateModel.sol
5	CDaiDelegate.sol

Compound Alpha Governance System Audit

Summary

Issues (11)

[M01] GovernorAlpha contract does not fully match specificationnot_fixed/medium

[M02] Lack of allowance front-running mitigation in ERC20 tokennot_fixed/medium

[M03] Proposal execution not handling returned datanot_fixed/medium

[L01] Lack of indexed parameters in eventsnot_fixed/low

[L02] Storage modification in require statementnot_fixed/low

Contracts (5)