Around $90 million has been mistakenly sent to users of popular DeFi staking protocol Compound following a bug in a recent upgrade.
The company's founder took to Twitter to plead with users to return the platform's crypto tokens, while also threatening those refusing to do so.
"If you received a large, incorrect amount of COMP from the Compound protocol error: Please return it," Robert Leshner, founder of Compound Labs, tweeted on Thursday. "Keep 10% as a white-hat. Otherwise, it's being reported as income to the IRS, and most of you are doxxed."
Compound is a decentralised finance (DeFi) platform with a liquidity mining program that rewards depositors and borrowers, but usually at a rate of a single-digit for annual percentage yield (APY).
A user known as 'napgener' first noticed an issue with Compound payouts, flagging three Ethereum transactions where users received around $15 million in COMP tokens in exchange for borrowing and supplying small token quantities for the likes of USDC, ETH and DAI.
DeFi protocols like Compound are designed to recreate traditional financial systems, such as banks and exchanges, but with blockchain powered by automated smart contracts. On Wednesday Compound attempted to roll out an upgrade, but it appears to have included an error.
"The new Comptroller contract contains a bug, causing some users to receive far too much COMP," Leshner said. "There are no admin controls or community tools to disable the COMP distribution; any changes to the protocol require a 7-day governance process to make their way into production."
RELATED RESOURCE
More and more users began reporting over payments after Leshner tweeted about the bug: $29 million worth of COMP has been claimed in one transaction, while another has said they received 70 million COMP tokens (thought to be worth about $28m).
Leshner didn't specify the issue with the update, however a developer from another DeFi crypto exchange, SushiSwap, tweeted that the fault could be blamed on a "one-letter bug" in the code.
-
Bigger salaries, more burnout: Is the CISO role in crisis?In-depth CISOs are more stressed than ever before – but why is this and what can be done?
-
Cheap cyber crime kits can be bought on the dark web for less than $25News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
-
Fuelling growth through transactionswhitepaper Prepare for the future of payments with flexible solutions
-
Monetization strategies for digital content creatorswhitepaper An overview of the economies of forex markets in Latin America and what payment providers need to know to enter the region
-
Retail forex development in Latin Americawhitepaper An overview of the economies of forex markets in Latin America and what payment providers need to know to enter the region
-
Delivering secure, trustworthy & scalable AIWebinar Trend Micro Vision One as a solution to cyber risks
-
The state of restaurants in 2023Whitepaper How restaurants are adapting to an increasingly unstable economy, and the top trends on the horizon for 2023
-
The ultimate guide to switching POS providersWhitepaper It may be time to officially start looking at switching your POS provider
-
The ultimate guide to the best restaurant POS systemsWhitepaper Helping you narrow down the best POS system for your specific business
-
The ultimate guide to the best legacy POS systems for restaurantsWhitepaper Key considerations when purchasing a POS system
