a16z-backed lending crypto protocol Compound Finance unveils $1m in bug bounty

As a seasoned researcher with a keen interest in blockchain technology and a penchant for unearthing hidden vulnerabilities, I find Compound Finance’s recent move to launch a $1 million bug bounty program through Immunefi particularly intriguing.

Compound Finance initiated a bug bounty program offering $1 million on the platform Immunefi, aiming to bolster the safety and robustness of their decentralized finance protocol.

Compound Finance, the digital currency lending platform, has launched a security incentive program in collaboration with Immunefi, providing awards worth up to one million dollars, to find and fix any potential weaknesses or bugs within their system.

On December 12th, via a Medium blog post, Immunefi announced that their bug bounty program is now open for security experts who can identify problems within the protocol. The blockchain security company mentioned that the value of the reward varies based on the gravity of the bug; critical bugs could potentially earn up to $1 million, while less severe issues will be compensated with smaller rewards, starting at $1,000.

The compensation for all rewards is stated in U.S. Dollars (USD), yet it’s distributed as COMP tokens, emphasizing Compound’s dedication to maintaining a reliable and transparent DeFi environment.

Immunefi

Established in 2017 by Robert Leshner and Geoffrey Hayes, Compound Finance functions as a decentralized lending and borrowing platform for digital currencies. This platform has garnered support from prominent investors like Andreessen Horowitz (a16z), Bain Capital Ventures, and Polychain Capital. Compound operates on various blockchain networks, such as Ethereum, Polygon, and Arbitrum.

Come October 2023, I found myself dealing with an unfortunate incident involving Onyx Protocol, a branch of Compound I had invested in. This fork was compromised due to a loophole in the code it inherited from Compound. The attackers cleverly exploited a well-known rounding error within Onyx’s design, which they used to siphon off an estimated $2.1 million from the system. It’s worth noting that Compound itself was not directly affected by this kind of breach.

Read More

2024-12-12 11:42