Bonzo Lend loses $9M in oracle exploit on Hedera
The attacker slipped a fake price past Supra oracle verification, borrowing $10M against 250 worthless SAUCE tokens. Nearly all of Hedera's DeFi value walked out the door in 24 hours.
Every Zipp story tagged #Bonzo, newest first.
The attacker slipped a fake price past Supra oracle verification, borrowing $10M against 250 worthless SAUCE tokens. Nearly all of Hedera's DeFi value walked out the door in 24 hours.
The exploit is already six weeks old, but the wallet's swelling ETH balance turns the case into a live tracking exercise for every researcher watching the funds.
The attacker used a signature-verification bug in Supra's oracle to spoof SAUCE prices, borrow against phantom collateral, and drain roughly $9.05M before the protocol was paused.