ABDUL ALI💎 (͠≖ ͜ʖ͠≖)つ

$3 in collateral is all it took to drain $9 million! All because the oracle didn't check the signature Bonzo Lend, Hedera's largest lending protocol was emptied through a Supra oracle exploit Here's how it worked: 1. Deposit 250 SAUCE tokens (worth a few dollars) as collateral 2. Submit a manipulated price update inflating SAUCE's value by 12 orders of magnitude 3. The oracle verifier accepts it with a zeroed signature and no cryptographic validation 4. Borrow 6.63 million USDC + 34.5 million wrapped HBAR against worthless collateral 5. Bridge $5.25 million to Ethereum have a nice pay day Total damage was $9.05 million 🤯 The attacker's wallet was funded via Tornado Cash and it now holds 2,360 ETH and 15.58 WBTC But the underlying cause? Supra's on-chain oracle verifier accepted a tampered price update carrying a zeroed signature That means the verification layer that's supposed to catch fake prices didn't perform basic checks… Bonzo's contracts weren't exploited Hedera's network wasn't compromised The oracle middleware was the entire issue