What is Compound (COMP)?

Compound (COMP) is the ERC-20 governance token of Compound, a decentralized lending protocol originally developed by Compound Labs and launched on Ethereum in 2018. The protocol enables users to supply crypto assets, use eligible assets as collateral, and borrow supported assets through algorithmically determined interest-rate markets without a traditional intermediary. (Source: Compound Documentation | Compound v2 Documentation) COMP was introduced in 2020 to decentralize protocol governance, allowing token holders and their delegates to propose, vote on, and implement changes affecting supported markets, risk parameters, protocol configurations, and upgrades. (Source: Compound Governance | Compound III Governance Documentation) 

Risk Associated to the Digital Asset 

Compound (COMP) presents a specific risk profile that investors and market participants must navigate:

• Market Volatility Risk: COMP is a freely traded governance token whose price can fluctuate significantly in response to broader crypto-market conditions, DeFi adoption, protocol activity, liquidity, and governance sentiment. Current market data indicate that COMP remains an actively traded mid-cap digital asset, although trading volumes can vary substantially across market cycles. (Source: CoinGecko) 

• Regulatory & Adoption Risk: Compound operates in decentralized finance lending, a sector that may face regulatory scrutiny relating to lending, borrowing, stablecoins, governance tokens, and non-custodial financial applications. Reduced use of the Compound protocol or adverse regulatory developments may negatively affect demand for COMP.

• Cybersecurity & Smart Contract Risk: Compound's lending infrastructure relies heavily on smart contracts, price feeds, governance controls, and liquidation mechanisms. The protocol has undergone security reviews by Trail of Bits, OpenZeppelin, and ChainSecurity, while Certora has provided formal verification for Compound's security properties. However, these measures cannot eliminate risks from undiscovered software vulnerabilities, oracle failures, governance errors, or economic attacks. (Source: Compound Security Documentation | Compound III Governance Documentation)  

• Concentration & Liquidity Risk:COMP has a 10 million token maximum supply, with approximately 9.67 million currently estimated to be circulating. Governance influence may nevertheless remain concentrated among large holders, delegates, protocol-controlled addresses, and other major stakeholders. Significant transfers or coordinated voting by large holders could influence both market liquidity and governance outcomes. (Source: CoinGecko | Compound Governance ) 

• Governance Risk: COMP holders control protocol upgrades and parameters. Poorly designed or malicious governance proposals may introduce technical, economic, or operational risks to the protocol.

• Oracle & Liquidation Risk: Compound's lending markets depend on reliable asset pricing and predefined collateral and liquidation parameters. Disruptions or inaccuracies in price feeds, combined with extreme market volatility, could result in incorrect valuations, abnormal liquidations, or losses for borrowers and lenders. Current Compound III deployments explicitly use configured price feeds, collateral factors, liquidation factors, and supply caps for supported assets. (Source: Compound III Documentation) 

Trading History of Digital Asset

Market Capitalization & Liquidity: As of June 2026, COMP remained a mid-cap DeFi governance asset, with approximately 9.7 million COMP in circulation and a market capitalization in the range of USD 168–174 million at the time of observation. Daily trading volume was approximately USD 11.7 million, although liquidity and volume fluctuated with market conditions. (Source: CoinGecko)

• Trading Activity: COMP is actively traded across major centralized exchanges and decentralized markets. Etherscan identifies COMP as an ERC-20 token with a maximum supply of 10 million COMP, with more than 219,000 token-holder addresses recorded at the time of observation. (Source: Etherscan)

• Derivatives Market Availability: COMP is also supported by cryptocurrency derivatives venues, including perpetual futures markets such as COMPUSDT, providing traders with additional mechanisms for leveraged exposure and hedging. (Source: Bybit)

Incidents of Manipulation or Security Failures

Compound is an Ethereum-based DeFi lending protocol secured by the underlying Ethereum network and by its own smart-contract architecture. Compound III is described in the official documentation as an EVM-compatible protocol that allows users to supply collateral and borrow a base asset, with the initial deployment using USDC as the base asset on Ethereum. (Source: Compound III Documentation)

Compound has experienced material operational incidents. In November 2020, a DAI price spike on Coinbase Pro reportedly affected Compound’s oracle pricing and contributed to abnormal liquidations. In September 2021, execution of Proposal 62 introduced a COMP distribution bug that caused excessive COMP rewards to be claimable, affecting approximately 280,000 COMP. (Source: Gate)

No verified public source reviewed for this disclosure identifies a deliberate, protocol-sanctioned market-manipulation event involving COMP itself. However, COMP remains exposed to common digital-asset market risks such as wash trading, spoofing, thin-liquidity price swings, governance speculation, and coordinated market activity.

The protocol’s current control environment is more mature than at launch, with publicly documented audits, formal verification, economic risk assessment work, governance controls, and bug bounty coverage. Compound v2 documentation lists Trail of Bits and OpenZeppelin audits, Certora formal verification, and Gauntlet economic security work. (Source: Compound Security | Immunefi) 

Token Ownership Concentration

COMP has a fixed maximum supply of 10,000,000 tokens. The original Compound governance announcement disclosed the following allocation: 2,396,307 COMP to Compound Labs shareholders; 2,226,037 COMP to founders and team subject to four-year vesting; 372,707 COMP to future team members; 4,229,949 COMP reserved for protocol users; and 775,000 COMP reserved for community governance initiatives. (Source: Medium)

As of June 2026, CoinGecko reports approximately 9.7 million COMP in circulating supply, while Etherscan reports a maximum total supply of 10,000,000 COMP. (Source: CoinGecko | Ethereum (ETH) Blockchain Explorer)

The original four-year vesting schedule for founders and team has largely matured, with secondary sources indicating that major unlocks ended in 2024. (Source: Bitstamp | Tokenomist) 

Holder concentration should be assessed using blockchain explorer data because large addresses may represent centralized exchange omnibus wallets, custody wallets, governance delegates, treasury wallets, or smart contracts rather than single beneficial owners. Current top-holder distribution can be reviewed through Etherscan’s COMP token-holder page. (Source: Ethereum (ETH) Blockchain Explorer)

Security Audit

Compound is not a sovereign Layer-1 blockchain and does not rely on its own independent consensus mechanism. COMP is an ERC-20 governance token on Ethereum, while the Compound lending protocol operates through smart contracts. Therefore, Compound’s security model relies on Ethereum’s network security, the correctness of Compound’s smart contracts, governance controls, oracle design, liquidation mechanics, and third-party integrations.

Compound v2 has been reviewed and audited by Trail of Bits and OpenZeppelin, with Compound’s own documentation listing multiple audits, formal verification by Certora, and economic security assessment work by Gauntlet.

Compound III, also known as Comet, underwent a comprehensive audit by OpenZeppelin from May to June 2022, and ChainSecurity also published a Compound III security audit. OpenZeppelin’s report described Compound III as a new version of the lending protocol with one base asset and multiple deployable instances across Ethereum and other EVM-compatible networks.

Compound also maintains a public bug bounty program through Immunefi, covering Compound III and related protocol components.

Hata Custody Controls

For client assets held on Hata, Hata maintains its standard institutional custody and compliance framework: SOC 2 Type II certified custody, multi-signature (Multi-Sig) withdrawal authorisation, segregation of client assets, audited operational governance, continuous blockchain-analytics monitoring, and FATF Travel Rule compliance aligned with major regimes (EU/MiCA, Singapore, Japan and the UAE). These controls govern how Hata safeguards SAFE held with the exchange and are independent of the asset's own protocol-level security.

Sources

• Compound Official Website

• Compound v2 Documentation

• Compound III Documentation

• Compound Governance is Live

• Compound v2 Security Documentation

• OpenZeppelin Compound Audit

• OpenZeppelin Compound III Audit

• ChainSecurity Compound III Audit

• Immunefi Compound Finance Bug Bounty

• CoinGecko Compound

• Etherscan COMP Token

• Bybit COMPUSDT Perpetual