Compound bug leaves $80 million in COMP at risk of being misrewarded

A newly introduced upgrade to the DeFi interest price protocol Compound Finance has contained a computer virus that leaves some users with unusual amounts of COMP token as rewards to be claimed.

“Unusual interest has been reported regarding the distribution of COMP following the execution of Proposal 062,” Compound Labs, the crew in the back of the Compound protocol, tweeted on Wednesday night time.

“No provided/borrowed budget are at chance — Compound Labs and contributors of the community are investigating discrepancies in the COMP distribution,” it delivered.

The reason of the Proposal 62, which went into effective a few hours ago, became to cut up the COMP distribution to liquidity providers and borrowers based totally on governance-set ratios in preference to the preceding 50/50 share version. Minor bugs are also to be patched in the new upgrade.

But a brand new bug contained inside the upgraded Comptroller Contract has mistakenly allowed a few customers to claim as lots as about 168,000 COMP tokens already, really worth round $50 million.

Robert Leshner, founder of Compound Labs, said in observe-up tweets that the Comptroller agreement deal with “contains a restrained quantity of COMP” even as the general public of the reward sits in a different Reservoir contract deal with.

Hence “the impact is bounded, at worst, 280,000 COMP tokens,” Leshner said. That is really worth approximately $eighty million as of press time.

The Comptroller settlement cope with now has 112,000 COMP tokens left.

“There aren’t any admin controls or community equipment to disable the COMP distribution,” Leshner said “Any changes to the protocol require a 7-day governance procedure to make their manner into manufacturing.”

Meanwhile, Compound Labs and contributors of the network are “comparing potential steps to patch the COMP distribution.”