About $90.1 million has mistakenly gone out to users of popular DeFi staking protocol Compound after an upgrade gone epically wrong. Now, the founder is making a plea — and issuing a few threats — to incentivize the voluntary return of the platform’s crypto tokens.
“If you received a large, incorrect amount of COMP from the Compound protocol error: Please return it,” Robert Leshner, founder of Compound Labs, tweeted late Thursday.
“Keep 10% as a white-hat. Otherwise, it’s being reported as income to the IRS, and most of you are doxxed,” continued the tweet.
The price of Compound’s native token, COMP, initially plunged nearly 13% in a day on news of the bug, but it’s since gained back ground.
Whether reward recipients choose to return many millions of dollars to the platform remains to be seen, though if history is any indication, it is certainly possible.
“Alchemix [another decentralized finance, or DeFi, protocol] had a similar incident a few months back where they gave out more rewards than intended,” blockchain security researcher Mudit Gupta told CNBC. “Almost everyone who got the extra rewards refunded the extra.”
What is different here is that the Alchemix exchange lost just $4.8 million.
But Gupta remains hopeful.
“This makes me optimistic that people will refund most of COMP tokens, as well, but you can never be sure,” he said.
What went wrong
DeFi protocols like Compound are designed to recreate traditional financial systems such as banks and exchanges using blockchains enriched with self-executing smart contracts.
On Wednesday, Compound rolled out what should have been a pretty standard upgrade. But soon after implementation, it was clear that something had gone seriously wrong.
“The new Comptroller contract contains a bug, causing some users to receive far too much COMP,” explained Leshner in a tweet.
“There are no admin controls or community tools to disable the COMP distribution; any changes to the protocol require a 7-day governance process to make their way into production,” he added, indicating that no fix could take effect for seven days.
Gupta, a core developer at decentralized crypto exchange SushiSwap, said in a tweet that the entire episode could be blamed on a “one-letter bug” in the code.
Compound made clear that no supplied or borrowed funds were at risk, but that did little to soften the blow.
Protocol users en masse began reporting massive windfalls. Soon after Leshner’s tweet about the bug, $29 million worth of COMP tokens were claimed in one transaction. Another claimed that they received 70 million COMP tokens into their account, or about $20.8 million at the time of their post.
The list of COMP token millionaires goes on.
For users accustomed to providing their crypto to borrowers at a set interest rate, which is typically a single-digit APY, the erroneous and sizable rewards were certainly a nice change in pace.
Leshner made clear, however, that there is a cap to the carnage. The Compound chief tweeted that the Comptroller contract address “contains a limited quantity of COMP.”
“The impact is bounded, at worst, 280,000 COMP tokens,” Leshner wrote. Gupta told CNBC that this entire pool of tokens — worth about $90.1 million, as of the time of publication — has already been handed out.
Threats lack teeth
Newly-minted COMP token millionaires now have a few options.
Bitcoin developer Ben Carman points out that it isn’t really possible for the platform to reclaim the money.
“They shouldn’t be able to recall the money without rolling back the chain,” explained Carman. “They’d have to purposefully 51% attack the chain to get rid of some blocks.”
So, it is up to a user’s discretion to decide next steps.
As a hypothetical, let’s take the account holder who was accidentally gifted $29 million in COMP tokens in error. This user could return the funds and hold onto the $2.9 million “white-hat” tip. But there is also nothing to keep them from holding their mistaken reward and risk being “doxxed.”
Doxxing someone means making public what is considered private information about an individual, which in the cryptosphere, is tantamount to committing a cardinal sin.
“Doxxing their customers is about the worst thing a crypto company can do from a PR perspective,” Mati Greenspan, portfolio manager and Quantum Economics founder, told CNBC.
And it seems unlikely Leshner would pursue that route. He was quick to walk back his Thursday evening tweet, saying that, it “was a bone-headed tweet/approach.”
And then there’s the threat related to the mistaken reward being reported to the IRS.
“Section 61 of the IRS code defines income very broadly. If you received a large sum from this error and decide to keep it, that would be considered income,” explained Shehan Chandrasekera, a CPA and head of tax strategy at crypto tax software company CoinTracker.io.
Users who were mistakenly awarded extra tokens could voluntarily return the funds. In that scenario, Chandrasekera says that “technically the recipient is supposed to pay income tax based on the market value of the coins at the time of receipt, but if he or she returns the funds, there’s no reason to report the income.”
But Chandrasekera also makes clear that no one has to return the funds. If their reward is reported to the IRS, they would simply be subject to income taxes on that amount.
So that $29 million COMP token winner stands to take the most home in a scenario where they just pay up to Uncle Sam, rather than pay it back to Compound.
But as Greenspan points out, how things play out with this bug is almost entirely beside the point. “The bigger issue is – can it happen again?” he said.
Compound is the world’s fifth-largest DeFi protocol with a total value locked of $9.65 billion, according to DeFi Llama, which provides ranking and metrics for DeFi protocols.
“The protocol can easily absorb a loss of $90 million and a lot of it will likely be returned, but the larger issue would be if people lose confidence in the system’s ability to function properly,” said Greenspan.
An iPhone 16 signage is seen on the window at the Fifth Avenue Apple Store on new products launch day on September 20, 2024 in New York City.
Michael M. Santiago | Getty Images News | Getty Images
The Indonesian government expects Apple to increase its proposed $100 million investment into the country, according to state media, as the iPhone maker seeks clearance from Jakarta to sell its latest phones.
The American tech giant’s latest smartphone model doesn’t meet Indonesia’s 40% domestic content requirements for smartphones and tablets and hasn’t been granted clearance to be sold in the country.
The purpose of the ban is to protect local industry and jobs, with officials asking Apple to increase its investments and commitments to the economy in order to gain greater access.
According to a report from Indonesian state media, the country’s Ministry of Industry met with representatives from Apple on Thursday regarding its proposal to invest $100 million over two years.
The funds would go toward a research and development center program and professional development academy in the country, as per the report.
The company also plans to produce accessory product components, specifically mesh for Apple’s AirPods Max, starting in July 2025, it added.
Apple didn’t immediately respond to a request for comment from CNBC.
While the new offer is 10 times larger than a proposal that was reported earlier, the government is still striving to sweeten the deal to get a “fair” commitment.
“From the government’s perspective, of course, we want this investment to be larger,” industry ministry spokesperson Febri Hendri Antoni Arif told state media on Thursday.
He said that a larger investment would help the development of Indonesia’s manufacturing sector, adding that its domestic industry was capable of supporting production of Apple devices such as chargers and accessories.
While Indonesia represents a small market for Apple, it also offers growth opportunities as it has the world’s fourth-largest population, according to Le Xuan Chiew, a Canalys analyst focusing on Apple strategy research.
“Its young, tech-savvy population with growing digital literacy aligns with Apple’s strategy to expand [global sales],” he said, noting that it also offers potential for manufacturing and assembly that supports Apple’s efforts to diversify its supply chain.
Success in this market requires a long-term approach, and Apple’s investment offer demonstrates a commitment to complying with local regulations and paving the way for future growth, he added.
Intuit CEO Sasan Goodarzi speaks at the opening night of the Intuit Dome in Los Angeles on Aug. 15, 2024.
Rodin Eckenroth | Filmmagic | Getty Images
Intuit shares fell 6% in extended trading Thursday after the finance software maker issued a revenue forecast for the current quarter that trailed analysts’ estimates due to some sales being delayed.
Here’s how the company performed in comparison with LSEG consensus:
Earnings per share: $2.50 adjusted vs. $2.35 expected
Revenue: $3.28 billion vs. $3.14 billion
Revenue increased 10% year over year in the quarter, which ended Oct. 31, according to a statement. Net income fell to $197 million, or 70 cents per share, from $241 million, or 85 cents per share, a year ago.
While results for the fiscal first quarter topped estimates, second-quarter guidance was light. Intuit said it anticipates a single-digit decline in revenue from the consumer segment because of promotional changes for the TurboTax desktop software in retail environments. While that will affect revenue timing, it won’t have any impact on the full 2025 fiscal year.
Intuit called for second-quarter earnings of $2.55 to $2.61 per share, with $3.81 billion to $3.85 billion in revenue. The consensus from LSEG was $3.20 per share and $3.87 billion in revenue.
For the full year, Intuit expects $19.16 to $19.36 in adjusted earnings per share on $18.16 billion to $18.35 billion in revenue. That implies revenue growth of between 12% and 13%. Analysts polled by LSEG were looking for $19.33 in adjusted earnings per share and $18.26 billion in revenue.
Revenue from Intuit’s global business solutions group came in at $2.5 billion in the first quarter. The figure was up 9% and in line with estimates, according to StreetAccount. Formerly known as the small business and self-employed segment, the group includes Mailchimp, QuickBooks, small business financing and merchant payment processing.
“We are seeing good progress serving mid-market customers in MailChimp, but are seeing higher churn from smaller customers,” Sandeep Aujla, Intuit’s finance chief, said on a conference call with analysts. “We are addressing this by making product enhancements and driving feature discoverability and adoption to improve first-time use and customer retention.”
Better outcomes are a few quarters away, Aujla said.
CreditKarma revenue came in at $524 million, above StreetAccount’s $430 million consensus.
At Thursday’s close, Intuit shares were up about 9% so far in 2024, while the S&P 500 has gained almost 25% in the same period.
On Tuesday Intuit shares slipped 5% after The Washington Post said President-elect Donald Trump’s proposed “Department of Government Efficiency” had discussed developing a mobile app for federal income tax filing. But a mobile app for submitting returns from Intuit is “already available to all Americans,” CEO Sasan Goodarzi told CNBC’s Jon Fortt.
Goodarzi said on CNBC that he’s personally communicating with leaders of the incoming presidential administration.
On the earnings call, Goodarzi sounded optimistic about the economy.
“Our belief, which is not baked into our guidance, is that we will see an improved environment as we look ahead in 2025, particularly just with some of the things that I mentioned earlier around just interest rates, jobs, the regulatory environment,” he said. “These things have a real burden on businesses. And we believe that a better future is to come.”
Bluesky has surged in popularity since the presidential election earlier this month, suddenly becoming a competitor to Elon Musk’s X and Meta’s Threads. But CEO Jay Graber has some cautionary words for potential acquirers: Bluesky is “billionaire proof.”
In an interview on Thursday with CNBC’s “Money Movers,” Graber said Bluesky’s open design is intended to give users the option of leaving the service with all of their followers, which could thwart potential acquisition efforts.
“The billionaire proof is in the way everything is designed, and so if someone bought or if the Bluesky company went down, everything is open source,” Graber said. “What happened to Twitter couldn’t happen to us in the same ways, because you would always have the option to immediately move without having to start over.”
Graber was referring to the way millions of users left Twitter, now X, after Musk purchased the company in 2022. Bluesky now has over 21 million users, still dwarfed by X and Threads, which Facebook’s parent debuted in July 2023.
X and Meta didn’t immediately respond to requests for comment.
Threads has roughly 275 million monthly users, Meta CEO Mark Zuckerberg said in October. Although Musk said in May that X has 600 million monthly users, market intelligence firm Sensor Tower estimates 318 million monthly users as of October.
Bluesky was created in 2019 as an internal Twitter project during Jack Dorsey’s second stint as CEO, and became an independent public benefit corporation in 2022. In May of this year, Dorsey said he is no longer a member of Bluesky’s board.
“In 2019, Jack had a vision for something better for social media, and so that’s why he chose me to build this, and we’re really thankful for him for setting this up, and we’ve continued to carry this out,” said Graber, who previously founded Happening, a social network focused on events. “We’re building an open-source social network that anyone can take into their own hands and build on, and it’s something that is radically different from anything that’s been done in social media before. Nobody’s been this open, this transparent and put this much control in the users hands.”
Part of Bluesky’s business plan involves offering subscriptions that would let users access special features, Graber noted. She also said that Bluesky will add more services for third-party coders as part of the startup’s “developer ecosystem.”
Graber said Bluesky has ruled out the possibility of letting advertisers send algorithmically recommended ads to users.
“There’s a lot on the road map, and I’ll tell you what we’re not going to do for monetization,” Graber said. “We’re not going to build an algorithm that just shoves ads at you, locking users in. That’s not our model.”
Bluesky has previously experienced major growth spurts. In September, it added 2 million users following X’s suspension in Brazil over content moderation policy violations in the country and related legal matters.
In October, Bluesky announced that it raised $15 million in a funding round led by Blockchain Capital. The company has raised a total of $36 million, according to Pitchbook.