Anonymous developers withdraw user funds a month after the start of the project.
The developers hid a smart contract feature that allowed them to withdraw funds from liquidity pools to third-party wallets. Thus, $750,000 in Wrapped Bitcoin, $4.8 million in Ethereum, and $5 million in DAI were stolen, as well as small amounts of other tokens.
The Creator of the Compound Finance landing Protocol, Robert Leshner, called this one of the largest incidents in terms of stolen funds in the field of decentralized finance. The smart contract was launched on November 10, and users accumulated cryptocurrency for about a month.
One of the investors said that he invested $1 million in the project, now he is offering $50 thousand for information that would help return the stolen funds.
The price of Compounder CP3R’s token has fallen by 99%.
The project was audited by Solidity Finance, which was supposed to guarantee users’ funds security. The company said that they pointed out the possibility of withdrawing cryptocurrencies in early November and showed their concern to the project developers. Later it turned out that they deliberately created this problem and took advantage of it.