How a zeroed oracle signature unlocked $9M from Hedera DeFi lender Bonzo Lend

Hedera-based Bonzo Lend faced a major exploit when a zero-signature oracle proof allowed a wallet to borrow about $9.05 million against 250 SAUCE, causing a temporary, erroneous price spike. The incident prompted a pause on withdrawals and maintenance across affected markets while Supra fixed the verifier. The event raises questions on verifier input validation, price deviation checks, and recovery terms. Bonzo Lend remains paused with reimbursement and reopening terms still undecided as of July 13.