Bonzo Lend's $9M Oracle Exploit: Why Verifier Assumptions Are DeFi's Weak Link
Bonzo Lend, a lender on Hedera, lost $9.05M in an exploit after a Supra verifier accepted an invalid signature. The article examines the mechanics of the exploit, its fallout, and potential fixes. It also highlights what lenders must change now, framing verifier assumptions as a weak link in DeFi.
DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Cryptodaily.
The attacker's forged Supra price update carried an all-zero BLS signature the verifier wrongly accepted, inflating SAUCE 12 orders of magnitude to borrow 6.63 million USDC and 34.5 million wrapped HBAR, cutting Bonzo's TVL 77%.
Discussion
Comments are reviewed before publication.
Want the full article?
Continue reading on Cryptodaily →
No comments yet.