Midas Capital: Compound V2 empty-market donation attack — exchange rate inflation + rounding error in redeemUnderlying
Midas Capital lost $600K to the same Compound V2 empty-market rounding vulnerability that had drained Hundred Finance for $7.4M just two months prior — making it Midas's second leaderboard entry of 2023.
Summary #
Midas Capital suffered a Lending / Money Market (Compound V2 fork) on 2023-06-17, resulting in a loss of approximately $600K.
What happened #
Midas Capital lost $600K to the same Compound V2 empty-market rounding vulnerability that had drained Hundred Finance for $7.4M just two months prior — making it Midas's second leaderboard entry of 2023.
Linked factors #
- RD-F-007 — related : Bug bounty absent — baseline integrity gap [via dashboard_risk_factors/Bug bounty: Unknown]
- RD-F-126 — causal : Is-a-fork-of (Cat 8 anchor) [via dashboard_risk_factors/Forked?: Yes — Compound V2 / Fuse fork]
- RD-F-127 — related : Upstream Compound has patches that may not be merged here [via dashboard_risk_factors/Forked?: Yes — Compound V2 / Fuse fork]