Other

"Proposal To Upgrade To UAV V3"

2022-08-30 [vendor] Compound Finance cETH bug
Primary Source ↗

Incident Details

Compound Finance released an update to change the price feed used by the Compound v2 protocol. Despite being audited by three firms, no one caught a bug that caused all transactions for ETH borrowers and lenders to revert, effectively freezing the entire cETH market on the protocol. Because code changes require a seven-day-long vote, the change can’t be reverted until a new proposal passes. In the meantime, users with positions they can’t access will need to add collateral or repay loans carefully in order to avoid being liquidated if the price of ETH drops by the time the market is operational again.

Technical Details

Initial Attack Vector
Software bug / unintentional loss
Vendor / Product
Compound Finance cETH bug

Timeline

  1. 2022-08-30 Breach occurred
  2. 2022-08-30 Publicly disclosed