Hedera-based lending protocol Bonzo Lend has locked withdrawals after an oracle verifier accepted a proof containing a zeroed signature and public key, permitting a pockets to borrow $9.05 million in opposition to 250 SAUCE.
Bonzo Lend and Bonzo Factors remained paused as of July 13, whereas the protocol’s official standing web page listed Bonzo Lend and all affected asset markets as underneath upkeep.
Liquidity suppliers stay unable to withdraw whereas Bonzo Finance Labs and the Bonzo Finance Basis decide a restoration path and the situations for reopening.
Pockets A primary deposited 250 SAUCE, price only some {dollars}. At 00:51 UTC, it submitted a SAUCE/wHBAR value replace that inflated the token’s worth by roughly 12 orders of magnitude regardless that the market value stayed close to 0.2 HBAR.
Eight seconds after the manipulated value reached the oracle’s on-chain storage, the pockets borrowed 6.63 million USDC.
It then borrowed 34.5 million wrapped HBAR, bringing the principal extracted by Pockets A to roughly $9.05 million at Bonzo’s reference costs.
How zeros handed the verifier
The submitted replace contained no legitimate oracle signature. Its signature area was [0,0], whereas the referenced committee public key was additionally the zero level, identified in cryptography as the purpose at infinity.
Supra’s verifier despatched these inputs to Hedera’s pairing precompile. As a result of each factors represented the mathematical id, the pairing equation returned true as designed.
The verifier then handled that consequence as proof of a committee signature as a result of it had not first rejected zero, id, and off-subgroup inputs.
In plain English, the community answered the equation it obtained accurately, whereas the verifier mistook that reply for authorization.
Bonzo mentioned its lending contracts then adopted their programmed loan-to-value guidelines utilizing the value already saved by the oracle.
A separate Pockets B borrowed roughly $1 million whereas the irregular value remained reside. That pockets contacted Bonzo, recognized itself as a white-hat responder, and said that it meant to return the funds.
Bonzo counted roughly $1 million as recovered, although the funds had but to be returned and the ultimate tally was nonetheless unsettled.
Bonzo reported that Supra mounted the verifier, however the lending pool stays closed.
The remaining questions embody whether or not regression checks affirm that the verifier rejects id inputs, whether or not Bonzo provides price-deviation checks or tightens collateral parameters, and the way out there property will likely be dealt with when withdrawals resume.
Bonzo’s official standing web page continued to checklist the incident as unresolved on July 13. Its newest formal replace, posted July 11, mentioned the protocol remained paused.
Bonzo has but to announce reimbursement, a reopening date, or user-facing withdrawal phrases, leaving liquidity suppliers depending on the restoration plan that comes subsequent.
