Static-analyzer high-severity count

Compound V3 (Comet)'s assessment for RD-F-010 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No public Slither/Mythril/Semgrep output on deployed bytecode. Audit proxy: OZ 0 critical, 1 high (partially addressed), 3 medium; ChainSecurity reentrancy informational. OZ 2024 disclosed no high-severity V3 code findings.

Sources #

Audit
https://www.openzeppelin.com/news/compound-iii-auditretrieved 2026-04-28
URL
https://www.openzeppelin.com/news/strengthening-defi-openzeppelin-and-compounds-security-partnership-in-2024retrieved 2026-04-28
Audit
https://reports.chainsecurity.com/Compound/ChainSecurity_Compound_Comet_Audit.pdfretrieved 2026-04-28

Methodology #

Count the number of unique high-severity detector findings from Slither + Mythril + Semgrep run against the deployed verified source (after deduplication across tools).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-010 score yellow collected_at 2026-04-28 00:20:50