Yes. Just as with the DeFi protocols, Compound Finance is not 100% safe. Both lenders and borrowers face the risk of a smart contract breach. Meaning hackers may cart away crypto locked up in Compound's smart contracts.