POPA ReconBonzo Lend (@bonzo_finance) hacked for $9M. The attacker deposited 3$ of collateral and walked out with $9M, without forging a single…
Bonzo Lend (@bonzo_finance) hacked for $9M. The attacker deposited 3$ of collateral and walked out with $9M, without forging a single signature RootCuase: Wallet A submitted a price update where the BLS signature field was [0,0]. A zeroed signature. No real committee ever signs a zero. To verify a BLS signature you run a pairing check, roughly e(signature, G) == e(H(message), pubkey). Supra's verifier built that check and handed it to Hedera's alt_bn128 pairing precompile (system contract 0.0.8). Both the submitted signature AND the referenced committee public key were the point at infinity…
The excerpt is quoted from a public Telegram channel, which owns its text.