Altcoins News
By Julie Binoche
1 / 15
How the Oracle Flaw Opened the Door. Oracle systems are the plumbing nobody sees until it bursts.
2 / 15
Bonzo Lend Goes Silent After the Hit. What's maybe more alarming than the exploit itself is what came after. Nothing, really.
3 / 15
DeFi's Oracle Problem Isn't Going Away. Oracle exploits aren't new. They've hit protocols on Ethereum, BNB Chain, Avalanche, and now Hedera.
4 / 15
A $9 million hole. That's what's left after an attacker found a crack in Supra's on-chain oracle verifier and used it to drain Bonzo Lend, a decentralized lending platform…
5 / 15
The attacker inflated the reported value of SAUCE, a token accepted as collateral on Bonzo Lend, by exploiting a flaw inside Supra's oracle verifier contract.
6 / 15
Oracle systems are the plumbing nobody sees until it bursts. They pull external price data — or in on-chain cases, verify it — and feed that data into smart contracts that govern…
7 / 15
The specific flaw here sat inside Supra's on-chain oracle verifier. Not a price feed from a centralized source, but the actual verification logic that's supposed to confirm…
8 / 15
It's worth being clear about what that kind of attack requires. It's not brute force. It's not a private key leak.
9 / 15
What's maybe more alarming than the exploit itself is what came after. Nothing, really. Bonzo Lend hasn't put out a detailed public statement.
10 / 15
Related: FIGR HELOC Protocol Launch Takes Builder Spotlight This Week
11 / 15
Users sitting on the platform don't know if the vulnerability is still live. Liquidity providers don't know if their funds are at risk.
12 / 15
The absence of communication also makes it impossible to know whether Bonzo Lend has the resources or the technical capacity to make affected users whole.
13 / 15
The Bonzo Lend incident probably pushes other Hedera-based protocols to take a hard look at their own Supra integrations.
14 / 15
Related: Injective npm Package Hit by Backdoor Attack Targeting Crypto Wallet Keys
15 / 15
What's left is a $9 million loss, a platform that's gone quiet, and a lot of open questions.
The Currency Analytics
Want the full story?