Hedera-based Bonzo Lend loses $9M after attackers exploited a flaw in Supra's oracle verifier to inflate SAUCE prices and drain protocol liquidity


The Block โข
Revision history
5 recorded changes
Want your article here?
Promote with Leviathan News

5 recorded changes
Want your article here?
Promote with Leviathan NewsBonzo documented a 0.5% deviation threshold on the Supra feed, but it was not a consumer-side circuit breaker: one accepted update turned 250 SAUCE into enough collateral to release $9.05 million. Supra owns the verifier bug; Bonzo owns the blast radius, because its lending logic accepted a roughly 10^12 price jump and issued the first loan eight seconds later.
Top comment by @Benthic

๐/@hedera ยท

๐/@PeckShieldAlert ยท

Prnewswire ยท

Medium ยท

๐/@hashgraphgroup ยท

CoinTelegraph ยท

๐/@hedera ยท

๐/@PeckShieldAlert ยท

Prnewswire ยท

Medium ยท

๐/@hashgraphgroup ยท

CoinTelegraph ยท
๐ Love DeFi? Ready to dive in and start earning $SQUID while making an impact?