About $90.1 million has mistakenly gone out to users of popular DeFi staking protocol Compound after an upgrade gone epically wrong. Now, the founder is making a plea — and issuing a few threats — to incentivize the voluntary return of the platform’s crypto tokens.
“If you received a large, incorrect amount of COMP from the Compound protocol error: Please return it,” Robert Leshner, founder of Compound Labs, tweeted late Thursday.
“Keep 10% as a white-hat. Otherwise, it’s being reported as income to the IRS, and most of you are doxxed,” continued the tweet.
The price of Compound’s native token, COMP, initially plunged nearly 13% in a day on news of the bug, but it’s since gained back ground.
Whether reward recipients choose to return many millions of dollars to the platform remains to be seen, though if history is any indication, it is certainly possible.
“Alchemix [another decentralized finance, or DeFi, protocol] had a similar incident a few months back where they gave out more rewards than intended,” blockchain security researcher Mudit Gupta told CNBC. “Almost everyone who got the extra rewards refunded the extra.”
What is different here is that the Alchemix exchange lost just $4.8 million.
But Gupta remains hopeful.
“This makes me optimistic that people will refund most of COMP tokens, as well, but you can never be sure,” he said.
What went wrong
DeFi protocols like Compound are designed to recreate traditional financial systems such as banks and exchanges using blockchains enriched with self-executing smart contracts.
On Wednesday, Compound rolled out what should have been a pretty standard upgrade. But soon after implementation, it was clear that something had gone seriously wrong.
“The new Comptroller contract contains a bug, causing some users to receive far too much COMP,” explained Leshner in a tweet.
“There are no admin controls or community tools to disable the COMP distribution; any changes to the protocol require a 7-day governance process to make their way into production,” he added, indicating that no fix could take effect for seven days.
Gupta, a core developer at decentralized crypto exchange SushiSwap, said in a tweet that the entire episode could be blamed on a “one-letter bug” in the code.
Compound made clear that no supplied or borrowed funds were at risk, but that did little to soften the blow.
Protocol users en masse began reporting massive windfalls. Soon after Leshner’s tweet about the bug, $29 million worth of COMP tokens were claimed in one transaction. Another claimed that they received 70 million COMP tokens into their account, or about $20.8 million at the time of their post.
The list of COMP token millionaires goes on.
For users accustomed to providing their crypto to borrowers at a set interest rate, which is typically a single-digit APY, the erroneous and sizable rewards were certainly a nice change in pace.
Leshner made clear, however, that there is a cap to the carnage. The Compound chief tweeted that the Comptroller contract address “contains a limited quantity of COMP.”
“The impact is bounded, at worst, 280,000 COMP tokens,” Leshner wrote. Gupta told CNBC that this entire pool of tokens — worth about $90.1 million, as of the time of publication — has already been handed out.
Threats lack teeth
Newly-minted COMP token millionaires now have a few options.
Bitcoin developer Ben Carman points out that it isn’t really possible for the platform to reclaim the money.
“They shouldn’t be able to recall the money without rolling back the chain,” explained Carman. “They’d have to purposefully 51% attack the chain to get rid of some blocks.”
So, it is up to a user’s discretion to decide next steps.
As a hypothetical, let’s take the account holder who was accidentally gifted $29 million in COMP tokens in error. This user could return the funds and hold onto the $2.9 million “white-hat” tip. But there is also nothing to keep them from holding their mistaken reward and risk being “doxxed.”
Doxxing someone means making public what is considered private information about an individual, which in the cryptosphere, is tantamount to committing a cardinal sin.
“Doxxing their customers is about the worst thing a crypto company can do from a PR perspective,” Mati Greenspan, portfolio manager and Quantum Economics founder, told CNBC.
And it seems unlikely Leshner would pursue that route. He was quick to walk back his Thursday evening tweet, saying that, it “was a bone-headed tweet/approach.”
And then there’s the threat related to the mistaken reward being reported to the IRS.
“Section 61 of the IRS code defines income very broadly. If you received a large sum from this error and decide to keep it, that would be considered income,” explained Shehan Chandrasekera, a CPA and head of tax strategy at crypto tax software company CoinTracker.io.
Users who were mistakenly awarded extra tokens could voluntarily return the funds. In that scenario, Chandrasekera says that “technically the recipient is supposed to pay income tax based on the market value of the coins at the time of receipt, but if he or she returns the funds, there’s no reason to report the income.”
But Chandrasekera also makes clear that no one has to return the funds. If their reward is reported to the IRS, they would simply be subject to income taxes on that amount.
So that $29 million COMP token winner stands to take the most home in a scenario where they just pay up to Uncle Sam, rather than pay it back to Compound.
But as Greenspan points out, how things play out with this bug is almost entirely beside the point. “The bigger issue is – can it happen again?” he said.
Compound is the world’s fifth-largest DeFi protocol with a total value locked of $9.65 billion, according to DeFi Llama, which provides ranking and metrics for DeFi protocols.
“The protocol can easily absorb a loss of $90 million and a lot of it will likely be returned, but the larger issue would be if people lose confidence in the system’s ability to function properly,” said Greenspan.
Tesla CEO Elon Musk speaks alongside U.S. President Donald Trump to reporters in the Oval Office of the White House on May 30, 2025 in Washington, DC.
Kevin Dietsch | Getty Images
At Tesla, vehicle sales are slumping, profits are thinning and revenue from regulatory credit sales are poised to dry up due to Republican-led policy changes.
In the past, CEO Elon Musk’s futuristic promises have convinced investors to look past top and bottom line numbers.
Not now.
Following another fairly dismal earnings report this week, Musk told analysts on the call that Tesla’s electric vehicles will soon become driverless, making money for owners while they sleep. He also said Tesla’s robotaxi service, which the company recently started testing in a limited capacity in Austin, Texas, will expand to other states, with a goal of being able to reach half the U.S. population by year-end, “assuming we have regulatory approvals.”
It didn’t matter.
Tesla shares plummeted 8% on Thursday as investors focused on the immediate challenges facing the company, including the rapid rise of lower-cost EV competitors, particularly in China, and a political backlash against Musk that harmed Tesla’s brand in the U.S. and Europe.
Automotive sales declined 16% year-over-year in the second quarter for the EV maker, with weak sales numbers continuing in Europe and California. Musk said there could be a “few rough quarters” ahead because of the EV credits expiring and President Donald Trump’s tariffs.
The stock bounced back some on Friday, gaining 3.5%, but still ended the week down and has now fallen 22% this year, the worst performance among tech’s megacaps. The Nasdaq rose 1% for the week and is up more than 9% in 2025, closing at a record on Friday.
“Look, we love robotaxis. And robots,” wrote analysts at Canaccord Genuity, who recommend buying Tesla’s stock, in a note after the earnings report. “Over time, Tesla is well positioned to benefit from these future-forward opportunities.”
The analysts, however, said that they’re focused on the profit and loss statement, writing: “But we love growth too, in the here and now. We need the P&L dynamics to turn.”
Analysts at Jefferies described the earnings update as “a bit dull.” And Goldman Sachs said Tesla’s robotaxi effort is “still small” with limited technical data points.
Tesla didn’t respond to a request for comment.
Musk, who has previously called himself “pathologically optimistic,” has been able to sway shareholders and send the stock soaring at times with promises of self-driving cars, humanoid robots and more affordable EVs.
But after a decade of missed self-imposed deadlines on autonomous driving, Wall Street is watching Tesla fall behind Alphabet’s Waymo in the U.S. and Baidu’s Apollo Go in China.
In Tesla’s shareholder deck, the company said the second quarter marked the start of its “transition from leading the electric vehicle and renewable energy industries to also becoming a leader in AI, robotics and related services.” The company didn’t offer any new guidance for growth or profits for the year ahead.
Regulatory hurdles
Business Insider reported on Friday that Tesla told staff its robotaxi service could launch in the San Francisco Bay Area as soon as this weekend.
But Tesla hasn’t applied for permits that would be required to run a driverless ridehailing service in California, CNBC confirmed. The company would first need authorizations from the state’s Department of Motor Vehicles and the California Public Utilities Commission (CPUC).
The CPUC told CNBC on Friday, that under existing permits, Tesla can only operate a human-driven chartered vehicle service, not carry passengers in robotaxis.
Waymo driverless vehicles wait at a traffic light in Santa Monica, California, on May 30, 2025.
Daniel Cole | Reuters
On the earnings call, Musk and other Tesla execs claimed the company was working on regulatory approvals to launch in Nevada, Arizona, Florida and other markets, in addition to San Francisco, but offered no details about what would be required.
Within Austin, the company said its robotaxi service had driven 7,000 miles, and that Tesla has been restricting its robotaxis’ to roads with a speed limit of 40 miles per hour. The Austin service involves a small fleet of about 10 to 20 Model Y vehicles equipped with the company’s latest self-driving systems.
The Tesla robotaxis rely on remote supervision by employees in a customer service center, and a human safety supervisor in the front passenger seat, ready to intervene if needed.
Compare that to what Alphabet said on its second-quarter earnings call the same day as Tesla’s results.
“The Waymo Driver has now autonomously driven over 100 million miles on public roads, and the team is testing across more than 10 cities this year, including New York and Philadelphia,” Alphabet said. Meanwhile, Waymo has become significant enough that Alphabet added a category to its Other Bets revenue description in its latest quarterly filing.
“Revenues from Other Bets are generated primarily from the sale of autonomous transportation services, healthcare-related services and internet services,” the filing said. The Other Bets segment remains relatively small, with revenue coming in at $373 million in the quarter.
Regardless of investor skepticism, Musk is more bullish than ever.
On Friday, the world’s richest person posted on his social network X that he thinks Tesla will someday be worth $20 trillion. On the earnings call earlier in the week, he said that when it comes to AI for cars and robots, “Tesla is actually much better than Google by far” and “much better than anyone at real world AI.”
CORRECTION: The Waymo Driver has now autonomously driven over 100 million miles on public roads, according to Alphabet. A previous version misstated the number of miles.
A vehicle Tesla is using for robotaxi testing purposes on Oltorf Street in Austin, Texas, US, on Sunday, June 22, 2025.
Tim Goessman | Bloomberg | Getty Images
In an earnings call this week, Tesla CEO Elon Musk teased an expansion of his company’s fledgling robotaxi service to the San Francisco Bay Area and other U.S. markets.
But California regulators are making clear that Tesla is not authorized to carry passengers on public roads in autonomous vehicles and would require a human driver in control at all times.
“Tesla is not allowed to test or transport the public (paid or unpaid) in an AV with or without a driver,” the California Public Utilities Commission told CNBC in an email on Friday. “Tesla is allowed to transport the public (paid or unpaid) in a non-AV, which, of course, would have a driver.”
In other words, Tesla’s service in the state will have to be more taxi than robot.
Tesla has what’s known in California as a charter-party carrier permit, which allows it to run a private car service with human drivers, similar to limousine companies or sightseeing services.
The commission said it received a notification from Tesla on Thursday that the company plans to “extend operations” under its permit to “offer service to friends and family of employees and to select members of the public,” across much of the Bay Area.
But under Tesla’s permit, that service can only be with non-AVs, the CPUC said.
The California Department of Motor Vehicles told CNBC that Tesla has had a “drivered testing permit” since 2014, allowing the company to operate AVs with a safety driver present, but not to collect fees. The safety drivers must be Tesla employees, contractors or designees of the manufacturer under that permit, the DMV said.
In Austin, Texas, Tesla is currently testing out a robotaxi service, using its Model Y SUVs equipped with the company’s latest automated driving software and hardware. The limited service operates during daylight hours and in good weather, on roads with a speed limit of 40 miles per hour.
Robotaxis in Austin are remotely supervised by Tesla employees, and include a human safety supervisor in the front passenger seat. The service is now limited to invited users, who agree to the terms of Tesla’s “early access program.”
On Friday, Business Insider, citing an internal Tesla memo, reported that Tesla told staff it planned to expand its robotaxi service to the San Francisco Bay Area this weekend. Tesla didn’t respond to a request for comment on that report.
In a separate matter in California, the DMV has accused Tesla of misleading consumers about the capabilities of its driver assistance systems, previously marketed under the names Autopilot and Full Self-Driving (or FSD).
Tesla now calls its premium driver assistance features, “FSD Supervised.” In owners manuals, Tesla says Autopilot and FSD Supervised are “hands on” systems, requiring a driver at the wheel, ready to steer or brake at all times.
But in user-generated videos shared by Tesla on X, the company shows customers using FSD hands-free while engaged in other tasks. The DMV is arguing that Tesla’s license to sell vehicles in California should be suspended, with arguments ongoing through Friday at the state’s Office of Administrative Hearings in Oakland.
Under California state law, autonomous taxi services are regulated at the state level. Some city and county officials said on Friday that they were out of the loop regarding a potential Tesla service in the state.
Stephanie Moulton-Peters, a member of the Marin County Board of Supervisors, said in a phone interview that she had not heard from Tesla about its plans. She urged the company to be more transparent.
“I certainly expect they will tell us and I think it’s a good business practice to do that,” she said.
Moulton-Peters said she was undecided on robotaxis generally and wasn’t sure how Marin County, located north of San Francisco, would react to Tesla’s service.
“The news of change coming always has mixed results in the community,” she said.
Brian Colbert, another member of the Marin County Board of Supervisors, said in an interview that he’s open to the idea of Tesla’s service being a good thing but that he was disappointed in the lack of communication.
“They should have done a better job about informing the community about the launch,” he said.
Alphabet’s Waymo, which is far ahead of Tesla in the robotaxi market, obtained a number of permits from the DMV and CPUC before starting its driverless ride-hailing service in the state.
Waymo was granted a CPUC driverless deployment permit in 2023, allowing it to charge for rides in the state. The company has been seeking amendments to both its DMV and CPUC driverless deployment permits as it expands its service territory in the state.
Meta CEO Mark Zuckerberg makes a keynote speech during the Meta Connect annual event, at the company’s headquarters in Menlo Park, California, on Sept. 25, 2024.
Manuel Orbegozo | Reuters
Meta CEO Mark Zuckerberg on Friday said Shengjia Zhao, the co-creator of OpenAI’s ChatGPT, will serve as the chief scientist of Meta Superintelligence Labs.
Zuckerberg has been on a multibillion-dollar artificial intelligence hiring blitz in recent weeks, highlighted by a $14 billion investment in Scale AI. In June, Zuckerberg announced a new organization called Meta Superintelligence Labs that’s made up of top AI researchers and engineers.
Zhao’s name was listed among other new hires in the June memo, but Zuckerberg said Friday that Zhao co-founded the lab and “has been our lead scientist from day one.” Zhao will work directly with Zuckerberg and Alexandr Wang, the former CEO of Scale AI who is acting as Meta’s chief AI officer.
“Shengjia has already pioneered several breakthroughs including a new scaling paradigm and distinguished himself as a leader in the field,” Zuckerberg wrote in a social media post. “I’m looking forward to working closely with him to advance his scientific vision.”
Read more CNBC tech news
In addition to co-creating ChatGPT, Zhao helped build OpenAI’s GPT-4, mini models, 4.1 and o3, and he previously led synthetic data at OpenAI, according to Zuckerberg’s June memo.
Meta Superintelligence Labs will be where employees work on foundation models such as the open-source Llama family of AI models, products and Fundamental Artificial Intelligence Research projects.
The social media company will invest “hundreds of billions of dollars” into AI compute infrastructure, Zuckerberg said earlier this month.
“The next few years are going to be very exciting!” Zuckerberg wrote Friday.