Bonzo Finance Blames Oracle Verification Flaw for $9M Exploit on Hedera

Bonzo Finance reports a $9.05M exploit on Hedera was caused by a flaw in a third-party oracle verifier, not Bonzo Lend’s contracts. An attacker manipulated a SAUCE price feed, accepted by the oracle with a zero-signature update, enabling inflated collateral and large borrowings. Supra’s oracle contract patch fixed the issue; Bonzo Lend and Bonzo Points are paused while recovery and remediation proceed. White-hat responder involved in a partial return; other services remain operational.