Major decentralized finance (DeFi) coin market Compound'south woes are worsening, with nearly $150 million worth of COMP now at risk due to a buggy upgrade to the protocol that went live concluding week.

On Thursday, Cointelegraph reported that a bug had resulted in between $70 1000000 and $85 million worth of COMP tokens being mistakenly offered to users as rewards afterwards an update intended to ready bugs and "split COMP rewards distribution" went awry.

Despite the advantage distribution error existence identified apace, Compound'south week-long delay in enacting new governance measures meant that the fault will not be fixed until Thursda.

On Sunday, Compound founder Robert Leshner tweeted that 202,472.5 COMP (worth approximately $65 million) had been placed at run a risk after the protocol's drip office was called for the first time in roughly two months.

The drip role makes tokens held in Compound's Reservoir available to users, with 0.v COMP beingness accumulated by the Reservoir per block. Leshner noted that "the majority of COMP reserved for users" is held in the Reservoir.

SushiSwap programmer Mudit Gupta took to social media to criticize the use of fourth dimension-locks on governance, asserting that roughly 100 people were aware of the threat posed by the drip office since the problems was discovered on Th, merely they were unable to human activity due to the time-delay on updating the protocol.

Gupta also warned of the risks associated with upgradable smart contracts, asserting they are inappropriate for "large [DeFi] primitives."

"I've come to see upgradability equally more than of a bug than a feature," he added.

While Leshner's tweet revealed that roughly 117,000 COMP worth $37.6 million had been returned to the protocol following the initial incident, Yearn.finance developer Banteg estimated that one-3rd of the funds that were placed at take a chance by the drip office had already been claimed by users at roughly three:xxx pm UTC on Sunday.

Banteg tallied the total value of COMP tokens placed at risk by the protocol's bug to at present be $147 million.

Related: Hackers exploit MFA flaw to steal from 6,000 Coinbase customers — Report

Despite the bug'south initial identification causing the price of COMP to quickly crash 3% from $330 to $286 on Thursday, the token speedily recovered and traded above $340 on Saturday, according to CoinGecko.

COMP has shed vii% of its value since tagging a local high of $347.5 on Sunday, terminal irresolute hands for $322 at the time of writing.