In November 2020, Inca’s Investigation Team noticed unusual transaction patterns occurring in Compound protocol on Ethereum. These unusual transactions potentially indicate crypto whales moving large amounts of DAI across the Compound protocol to drive up the key DeFi adoption indicator – TVL.
TVL is a popular metric in the DeFi ecosystem representing the total value of assets locked or supplied into a DeFi application’s smart contracts. It is used to assess the amount of liquidity available on the protocol and is often considered as a measure of the project's strength.
To profit, they park 21M DAI in a separate Ethereum address and repeat this supply-borrow manipulation five times, constantly transferring funds to a new address.
Essentially this trader took out loans of approximately 67% of the deposit amount and deposited the loan back into the Compound protocol. This procedure tricks the protocol into thinking that the TVL has increased by $82.6M in DAI.
The whole cycle of fund flows (red – funds supply; green – borrowed funds; black – fund transfer to the other address of the same entity), Nov 2020. Source: NTerminal
To clarify, it’s possible for one entity to lend to Compound and borrow from it and borrow from it at the same time.
Moreover, this can be done multiple times.
The Compound protocol looks at everyone who has lent money to the smart contract and who has borrowed from it and gives them COMP tokens.
This allows the trader to collect almost $550K COMP tokens on a series of deposits and loans. This trading strategy is at the core of yield farming in the DeFi ecosystem.
Free tokens are gained by borrowing and lending to incentivize traders to participate in the protocol. While the whales are profiting from the free tokens, the protocol creators get to inflate their TVL metric.
Total value locked in Compound protocol (DAI)
This phenomenon severely distorts the real picture of what is happening in the DeFi space and makes this area vulnerable to flash crash attacks.
Also read here