Compound Finance's governance system faced an attack on July 28, 2024, when Proposal 289 passed with a 52 percent majority, allocating 499,000 COMP tokens worth $24 million from the DAO treasury to a yield strategy controlled by a group of traders calling themselves the Golden Boys. The proposal's passage exposed fundamental vulnerabilities in token-weighted governance where concentrated capital could override community interests.
Compound Governance Attack: Proposal 289 Controversy
Compound governance faces attack through Proposal 289 on July 29, 2024, highlighting vulnerabilities in vault-based lending protocol governance mechanisms.

Key Points
- Compound governance faces attack through Proposal 289 on July 29, 2024, highlighting vulnerabilities in vault-based lending protocol governance mechanisms.
Advertisement
728×90
Proposal 289 would have created a "goldCOMP" wrapper enabling a small group to manage treasury distributions and generate yield for themselves while claiming to provide passive income to COMP holders. Five wallets, apparently acquiring COMP from the Bybit exchange, delegated more than 228,000 tokens to governance delegates associated with a participant known as Humpy. Combined with existing delegate holdings, this created voting control exceeding 81 percent of the 400,000 COMP required to reach quorum. The strategy required only 52 percent of voting participants—achievable through concentrated capital—rather than majority support from the broader COMP holder base.
Compound security advisor Michael Lewellen documented that multiple accounts had been observed purchasing COMP tokens specifically to influence the vote, suggesting coordinated exploitation of governance mechanisms. The attack demonstrated that token-weighted voting could be weaponized by wealthy actors willing to spend millions purchasing voting power to extract value from community treasuries.
The Golden Boys agreed to rescind Proposal 289 after AlphaGrowth, a competing proposal creator, offered a staking product distributing 30 percent of Compound's existing and future market reserves to COMP stakers proportionally. This settlement converted a governance attack into a negotiated outcome: the attackers received commitment to ongoing treasury distributions rather than a single massive allocation, while the community avoided having control of significant reserves handed to a small group.
The incident highlighted that governance tokens created asymmetric incentives where wealthy participants could accumulate voting power specifically to extract value. Compound lacked mechanisms preventing rapid token accumulation through exchange purchases or requiring voting delays that would allow community mobilization. The vulnerability applied broadly to protocols using simple token-weighted voting without additional safeguards.
MiningPool content is intended for information and educational purposes only and does not constitute financial, investment, or legal advice.
Advertisement
728×90
Related Stories

NEAR Intents Says an Omni Bridge Bug Cost It About $3.8 Million
The protocol halted services, patched the contract-side flaw and promised to compensate users in full, naming eleven networks whose deposits and withdrawals would stay down for another 12 hours. Investigators who traced the outflows do not agree on where the money went.

Aave Opened a USDC Market Backed by Seven Coinbase Stock Tokens
The Equities Hub on Base takes tokenized Apple, Microsoft, Nvidia and four other stocks as collateral at 65 to 79 percent, capped at about $29 million, and lends only USDC against them. The market runs continuously while the Chainlink feed pricing that collateral stops publishing from Friday evening until Sunday evening Eastern.

Robinhood Chain Fees Fell 95% From Their Peak as Deposits Rose
Network fees on Robinhood's layer-2 fell from $6.04 million on September 4 to $234,819 twelve days later, according to DeFiLlama. Over the same stretch the value held in applications on the chain rose about 15% to a high for the series, and fees have edged back up since the low.

Zcash Holders Voted to Keep the Halving and Cut Blocks to 25 Seconds
Nearly 2.4 million ZEC took part, about two-thirds of the eligible supply, and 98.9 percent chose bitcoin-style halvings over a smoothed issuance curve. The result is advisory: NU7 still needs code, testing and a ZIP activation.

Cardano's Committee Falls to Three Seats If This Vote Fails
Four of seven seats expire at the end of epoch 653, and below five members the committee cannot ratify treasury withdrawals, parameter changes or the hard fork initiation that Dijkstra depends on.

An $11,000-a-Day Token Borrowed $75 Million Against Itself on Cronos
Validators halted Crypto.com's chain and rolled its state back to before the attack. About $6 million had already crossed to Ethereum; the rest sits on a ledger whose history has now been rewritten.
Stay informed
Verifiable crypto journalism, delivered to your inbox.
Weekday mornings. No hype. No financial advice. Just what happened and why it matters.
No spam. Unsubscribe anytime. Read our privacy policy.
