POPA ReconBonzo Lend Loses $9M in Supra Oracle Exploit
Bonzo Lend Loses $9M in Supra Oracle Exploit Bonzo Lend, a lending protocol on Hedera, was drained of about $9M after an attacker slipped a forged price update past a Supra oracle verifier. The verifier accepted a signature made entirely of zeros — letting the attacker inflate SAUCE by ~12 orders of magnitude, then borrow 6.63M USDC and 34.5M wrapped HBAR against a few dollars of collateral. Bonzo says the flaw sat in the third-party verifier, not Hedera itself; Supra shipped a fix and the real price returned within 45 minutes — but Bonzo Lend was paused. 👉 theblock.co/post/407960/hedera-le…
The excerpt is quoted from a public Telegram channel, which owns its text.