Oracle · CryptoSlate
How a zeroed oracle signature unlocked $9 million from Hedera DeFi lender Bonzo Lend
Compiled by KHAO Editorial — aggregated from 1 source + 3 references discovered via search. See llms.txt for citation guidance.
◌ Single Source
Hedera-based lending protocol Bonzo Lend has locked withdrawals after an oracle verifier accepted a proof containing a zeroed signature and public key, allowing a wallet to borrow $9.05 million against 250 SAUCE.
Key facts
- Hedera-based lending protocol Bonzo Lend has locked withdrawals after an oracle verifier accepted a proof containing a zeroed signature and public key, allowing a wallet to borrow $9.05 million
- It then borrowed 34.5 million wrapped HBAR, bringing the principal extracted by Wallet A to approximately $9.05 million at Bonzo's reference prices
- Bonzo Lend and Bonzo Points remained paused as of July 13, while the protocol’s official status page listed Bonzo Lend and all affected asset markets as under maintenance
- A separate Wallet B borrowed roughly $1 million while the abnormal price remained live
Summary
01 Bonzo Lend paused withdrawals after an oracle verifier accepted a zero-signature proof, letting Wallet A borrow $9.05 million against 250 SAUCE. 02 The manipulated price update briefly let the protocol issue millions in USDC and wrapped HBAR, while liquidity providers stayed locked out. 03 Supra says it patched the verifier, but Bonzo is still paused as recovery terms, reimbursement, and reopening remain undecided. Bonzo Lend and Bonzo Points remained paused as of July 13, while the protocol’s official status page listed Bonzo Lend and all affected asset markets as under maintenance.