RageTradeCore security record

Smart contracts will often have `owner` variables to designate the person with special privileges to make modifications to the smart contract. The `ClearingHouse.sol` contract contains the following privileged roles: - `_governance` and `_teamMultisig`, as initialized during the constructor: - Renounce the role(s) and thereby disable all followingly listed actions, by calling `transferGovernance()` and `transferTeamMultisig()` with a known uncontrolled non-zero address. - Assign an arbitrary address as new `_governance` or `_teamMultisig`, by calling `transferGovernance()` and `transferTeamMultisig()`, respectively. - Modify collateral settings, by calling `updateCollateralSettings()`. - Modify pool settings, by calling `updatePoolSettings()`. - Modify protocol settings, by calling `updateProtocolSettings()`. - Putting the contract in and out of the paused state, by calling `pause()`/`unpause()`. - `rageTradeFactoryAddress`, as initialized during `initialize()`: - Register new pools, by calling `registerPool()`.

Every Solidity file specifies in the header a version number of the format `pragma solidity (^)0.8.*`. The caret (`^`) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version _and above_, hence the term "unlocked". Further, while for the most part, the pragma is ^0.8.9, the following contracts use a different pragma: * In `./extloads/ClearingHouseExtsload.sol`, it is `^0.8.0`. * In `./interfaces/IExtsload.sol`, it is `>=0.5.0`. * In `./libraries/Account.sol`, it is `^0.8.10`. * In `./libraries/Bytes32.sol`, it is `^0.8.0`. * In `./libraries/Protocol.sol`, it is `^0.8.0`. * In `./libraries/SafeCast.sol`, it is `^0.8.0`. * In `./libraries/SignedFullMath.sol`, it is `>=0.8.0`. * In `./utils/Multicall.sol`, it is `>=0.7.6`. * In `./utils/TimelockControllerWithMinDelayOverride.sol`, it is `^0.8.0`.