
∞ Sunantha ∞
2.3K posts

∞ Sunantha ∞
@TheRealSun88
WEB3 promoter / ICP girl / nurse by training












MULTI/DEX — the world's most advanced DeFi — will be released in game mode later this week, together with source code for ICP community eval. Players to get $100k dummy assets to compete. Will be offered to the NNS for autonomous/ownerless execution. *True* DeFi that mimics CEXs.
















$3 in collateral is all it took to drain $9 million! All because the oracle didn't check the signature Bonzo Lend, Hedera's largest lending protocol was emptied through a Supra oracle exploit Here's how it worked: 1. Deposit 250 SAUCE tokens (worth a few dollars) as collateral 2. Submit a manipulated price update inflating SAUCE's value by 12 orders of magnitude 3. The oracle verifier accepts it with a zeroed signature and no cryptographic validation 4. Borrow 6.63 million USDC + 34.5 million wrapped HBAR against worthless collateral 5. Bridge $5.25 million to Ethereum have a nice pay day Total damage was $9.05 million 🤯 The attacker's wallet was funded via Tornado Cash and it now holds 2,360 ETH and 15.58 WBTC But the underlying cause? Supra's on-chain oracle verifier accepted a tampered price update carrying a zeroed signature That means the verification layer that's supposed to catch fake prices didn't perform basic checks… Bonzo's contracts weren't exploited Hedera's network wasn't compromised The oracle middleware was the entire issue

















