Compound (COMP) Smart Contract Risk
No Revert on Transfer Failure
⚡ MEDIUM severityVulnerability
COMP token has a built-in delegation mechanism that executes on every transfer. This adds gas overhead and introduces potential reentrancy through the delegate checkpoint callback.
Related: Unchecked Return Values
Safe integration
Account for the extra gas cost of COMP transfers. Apply reentrancy guards when interacting with COMP.
Contract addresses
| Chain | Address |
|---|---|
| Ethereum | 0xc00e94cb662c3520282e6f5717214004a7f26888 |
Audit any contract that interacts with COMP: SmartContract.us automatically detects COMP integration risks →
Chain & standard security guides
What this contract permits today
Read live from Ethereum on 2026-10-14. This is a different question from the integration risk above: not how to call the token safely, but what the holders of its keys are able to do to the people holding it.
| Question | Answer |
|---|---|
| Can new tokens be created? | No |
| Can transfers be blocked? | No |
| Is there a trading tax? | No |
| Can the logic be replaced? | No |
| Can liquidity be withdrawn? | Yes |
No privileged address could be identified. This is not the same as there being none — see the limitation below.