Compound bug leaves $80 million in COMP at risk of being misrewarded

advertisement

A newly introduced upgrade to the DeFi interest rate protocol Compound Finance has contained a bug that leaves some users with unusual amounts of COMP token as rewards to be claimed.

"Unusual activity has been reported regarding the distribution of COMP following the execution of Proposal 062," Compound Labs, the team behind the Compound protocol, tweeted on Wednesday night.

"No supplied/borrowed funds are at risk -- Compound Labs and members of the community are investigating discrepancies in the COMP distribution," it added.

The purpose of the Proposal 62, which went into effective a few hours ago, was to split the COMP distribution to liquidity suppliers and borrowers based on governance-set ratios instead of the previous 50/50 share model. Minor bugs are also to be patched in the new upgrade.

But a new bug contained in the upgraded Comptroller Contract has mistakenly allowed some users to claim as much as about 168,000 COMP tokens already, worth around $50 million. 

Robert Leshner, founder of Compound Labs, said in follow-up tweets that the Comptroller contract address "contains a limited quantity of COMP" while the majority of the reward sits in a different Reservoir contract address.

Hence "the impact is bounded, at worst, 280,000 COMP tokens," Leshner said. That is worth about $80 million as of press time.

The Comptroller contract address now has 112,000 COMP tokens left.

"There are no admin controls or community tools to disable the COMP distribution," Leshner said "Any changes to the protocol require a 7-day governance process to make their way into production."

Meanwhile, Compound Labs and members of the community are "evaluating potential steps to patch the COMP distribution.”

Trending Stories

Get Your Crypto
Daily Brief

Delivered daily, straight to your inbox.

Will Sanctions Drive Russia into the Arms of Cryptocurrencies?

From the removal of many Russian banks from SWIFT to a seemingly constant flow of new sanctions, Russia’s invasion of Ukraine has left many to wonder: Is the country likely to lurch towards cryptocurrencies? And if so, what does this mean for businesses that are holding and/or using crypto? Crypto and sanctions evasion Although crypto […]
Read Full Story
Sponsored Post

Layer-2 Scaling Solutions: A Framework for Comparison - Commissioned by Polygon

Ethereum had a breakout year in 2021. It’s native asset, ETH’s, market capitalization surpassed $500 billion for the first time. Its network facilitated upwards of $7 trillion value transfer. Non-fungible tokens (NFTs) emerged as another “killer application” that have put its technology on the global stage and caught the attention of the masses.
Read Full Story
May 5, 2022, 3:17PM UTC
More