Every Zipp story tagged #Hedera, newest first.
A zeroed oracle signature was the entire vulnerability: one byte in the wrong place let a single attacker borrow against collateral the system could not price, draining the Bonzo money market on…
The attacker slipped a fake price past Supra oracle verification, borrowing $10M against 250 worthless SAUCE tokens. Nearly all of Hedera's DeFi value walked out the door in 24 hours.
The attacker used a signature-verification bug in Supra's oracle to spoof SAUCE prices, borrow against phantom collateral, and drain roughly $9.05M before the protocol was paused.
CryptoSlate
CoinDesk
WuBlockchain