Bonzo Lend Hit for $9.05 Million After Supra Oracle Verifier Accepts Manipulated Price Update on Friday

SUPRA-3.57%
HBAR0.11%
According to Bonzo's preliminary incident report, Bonzo Lend, a decentralized lending protocol on Hedera (HBAR), was exploited for approximately $9.05 million late Friday ET after an attacker submitted a manipulated price update to Supra's oracle verifier. The attacker exploited a flaw in the verifier's signature validation logic—the contract accepted a price update carrying a cryptographic signature made entirely of zeros, which should have been rejected immediately. Within seconds, the wallet borrowed roughly 6.63 million USDC and 34.5 million wrapped HBAR against a near-worthless collateral deposit. Bonzo paused its lending protocol shortly after the attack. Supra acknowledged the issue and deployed a fix to the affected contract; Hedera confirmed the incident was confined to the third-party oracle verifier and did not involve a flaw in the network's core infrastructure.
Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.
Comment
0/400
No comments