🚨 $9M just left Hedera's Bonzo Lend because an oracle accepted an invalid signature.


$20 of SAUCE as collateral, price feed inflated ~1 trillion x, 6.6M USDC + 34.5M wHBAR borrowed and bridged out.
This was NOT a Hedera L1 breach. Bonzo paused fast. SaucerSwap pools untouched.
But the root cause should scare everyone. The signature was invalid and the system accepted it anyway. Unverified data is crypto's biggest attack surface. AI's too.
Verify at the source or pay at the exit. $HBAR
HBAR-0.51%
SAUCE-0.72%
post-image
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned