Bonzo Lend's $9M Oracle Exploit: Why Verifier Assumptions Are DeFi's Weak Link
Hedera lender Bonzo Lend lost $9.05M after a Supra verifier accepted an invalid signature. We unpack the mechanics, fallout, and fixes, plus what lenders must change now.
DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Cryptodaily.
The attacker's forged Supra price update carried an all-zero BLS signature the verifier wrongly accepted, inflating SAUCE 12 orders of magnitude to borrow 6.63 million USDC and 34.5 million wrapped HBAR, cutting Bonzo's TVL 77%.
Want the full article?
Continue reading on Cryptodaily →