$160M At Risk Due to Bug in DeFi Lending Protocol Compound

From decrypt.co

A week ago, Compound founder Robert Leshner called a bug in his lending protocol’s smart contract a “moral dilemma.” Perhaps for some, but for others today the smart contracts became a vending machine full of free cash. Today, someone exploited a bug in Compound’s Controller contract, which is the part of the protocol that distributes yield farming rewards to users. By calling Compound’s drip() function, they transferred $68 million, or 202,472 COMP, from Compound’s reservoir to its Comptroller. Since Banteg, a core developer at Yearn.Finance, tweeted about the exploit earlier this afternoon, four major ... (full story)