Nobody except the 'bank' in this case lost money. In fact, Compound also has a treasury that can and has been used to pay out users affected by bugs. Some small percentage of every loan on compound goes to fund the treasury. It's quite a good system.