Exclusive: Almost $15M in missing funds returned to Compound

Around $80 million went out to DeFi staking protocol Compound (COMP/USD) users by mistake last week. The weekend brought dismal news, as $22 million more were lost due to the same bug and another $44 million are at risk. 

Thankfully, things started looking up on Monday. The crypto processing and exchange platform ChangeNOW managed to return about $14.5 million of the missing funds to Compound. 

What exactly happened?

At the end of last week, a user created a 45,505 COMP transaction at ChangeNOW. Soon thereafter, it was flagged by ChangeNOW's proprietary, intelligent risk management AML system. The system was developed by ChangeNOW. 

As ChangeNOW reported to Invezz, the user contacted the platform and supported them in the decision to return the funds to Compound. Furthermore, the user declined a 10% white hat, asking to return the full amount. 

ChangeNOW head of PR Mike Ermolaev told Invezz:

Compound confirmed the receipt on Twitter. Leshner tweeted:

On the day of the news, COMP plummeted by almost 13%, but recovered later. ChangeNOW’s return was the first large and positive response to Leshner’s request. 

The Compound update involved a new Comptroller contract, which contained a one-letter bug according to Gupta, a core developer at SushiSwap (SUSHI/USD). This bug led to some users getting too much COMP. Unfortunately, it wasn’t possible to stop the distribution. Leshner explained:

Another $66 million was added to a defective Compound Finance contract put in place to disburse liquidity mining rewards, of which a third was exploited. The reason was the same glitch that drained $80 million in tokens from Compound last week. On Sunday morning, the Yearn.Finance DeFi developer ‘banteg’ tweeted that the remaining $44 million was also at risk.

Will the other recipients also return the money? History shows they might. A few months ago, DeFi protocol Alchemix had a similar incident, and almost everyone who got the extra money refunded the platform.

It is also not the first time ChangeNOW is assisting in such situations. In 2019, ChangeNOW retrieved 500,000 XRP for GateHub after an exchange lost about $22M during a hack. ChangeNOW improved its AML system after the GateHub incident.