Bonzo Lend Loses About $9.05 Million in Oracle Exploit Tied to Supra Signature Verification Flaw

Bonzo Lend, a Hedera-based lending protocol, said it lost about $9.05 million in an oracle exploit and has paused the protocol while it works on recovery and remediation. According to NS3.AI, Bonzo said the incident stemmed from a flaw in Supra’s signature verification that enabled an attacker to manipulate SAUCE prices. Bonzo said Bonzo Labs and the Bonzo Finance Foundation are coordinating efforts to recover funds and address the vulnerability.