Digital Asset
Intelligence
Security Incident

Compound Contract Vulnerability: $68.80M Reported Loss

·Historical incident record

Incident Overview

While the decentralized lending agreement Compound tried to fix the loopholes in the liquidity mining token distribution contract through the No. 63 or No. 64 community proposal, another COMP token worth US$68.8 million (a total of 202,472 COMP) was due to The call of the drip() function was entered into the liquidity mining token distribution contract that has existing loopholes.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Compound

    Attack methodContract Vulnerability
    Reported loss$ 80,000,000
  2. Incident date
    Target

    Compound

    Attack methodOracle Attack
    Reported lossNot disclosed
  3. Incident date
    Target

    Compound

    Attack methodSecurity Vulnerability
    Reported loss$ 660,000
  4. Incident date
    Attack methodBlock signature problem
    Reported lossNot disclosed
  5. Incident date
    Attack methodFlash loan attack
    Reported loss3,180,000 FINS