Breaking: Zeroed Oracle Signature Unlocked Triggers $9M Loan at Bonzo Lend
Bonzo Lend, a Hedera-based DeFi lending protocol, suspended withdrawals after a verification step accepted a flawed proof that included a zeroed signature and a zero public key. The result was a wallet borrowing roughly $9.05 million against a scant 250 SAUCE collateral, according to the protocol’s status page and on-chain data. The incident has sent ripples through the Hedera ecosystem and raised fresh questions about oracle integrity in DeFi.
What Happened: The Zeroed Oracle Signature Unlocked
The root cause, as described by Bonzo Lend’s post-incident notes, rests in an oracle update that carried no valid cryptographic signature. The submitted data showed a signature field of [0,0] and pointed to the zero point of the referenced committee public key, a cryptographic edge case informally known as the point at infinity. In short, the verifier treated an invalid payload as trustworthy, enabling a large borrow despite an unsettled price signal.
Timeline, Assets, and Amounts
The sequence began when Wallet A deposited 250 SAUCE tokens, which were worth only a few dollars at the moment. At 00:51 UTC, Wallet A submitted a price update for SAUCE in relation to HBAR. The update boosted the apparent SAUCE price by roughly 12 orders of magnitude, even as the live market price hovered near 0.2 HBAR per SAUCE.
Eight seconds after the manipulated price entered the oracle’s on-chain storage, the wallet borrowed 6.63 million USDC. The wallet then expanded its exposure by drawing 34.5 million wrapped HBAR, bringing the overall principal unlocked to about $9.05 million when evaluated against Bonzo’s reference prices.
Bonzo Lend’s own reference data pegged the value of the collateral at the moment of borrowing in a way that made the large loan appear covered under the protocol’s risk models. That dynamic, paired with the invalid signature, created a rare but highly consequential window of opportunity for an attacker.
Impact on Users, Liquidity Providers, and Governance
The incident prompted an immediate pause on withdrawals across Bonzo Lend and the broader Bonzo ecosystem. The protocol’s maintenance page shows Bonzo Lend and all affected asset markets marked as under maintenance as of July 13. Liquidity providers (LPs) remain unable to withdraw funds while Bonzo Finance Labs and the Bonzo Finance Foundation chart a recovery path.
Industry observers say the episode underscores the fragility of tokenized collateral when the oracle layer—the feed that informs pricing—can be gamed or corrupted. The consequence is a chasm between on-chain data and real-world liquidity, a risk that DeFi protocols on Hedera and beyond continue to grapple with.
Official Responses and Early Assessments
Bonzo Finance Labs and the Bonzo Finance Foundation have signaled that a detailed post-incident analysis will precede any reopening steps. A spokesperson for Bonzo Finance Labs noted that the team is pursuing a multifaceted recovery plan, including asset tracing, potential compensation mechanisms, and enhanced guardrails for future oracle inputs. The Bonzo Foundation emphasized governance-led decisions, warning that any action would consider both user protections and system-wide stability.
"This situation highlights a broader truth in DeFi: the security of the oracle layer can determine whether a protocol thrives or stalls," said a Bonzo Finance Labs risk supervisor who spoke on condition of anonymity. "We are prioritizing a clear, data-driven review and will publish an exact, actionable path forward."
A separate spokesperson from the Bonzo Foundation added, "We will not rush conclusions. Our focus is to secure assets, understand the exposure, and communicate findings transparently to the community before any reopening actions are taken."
What This Means for the Hedera DeFi Landscape
The Bonzo episode arrives at a time of rising DeFi activity on Hedera but ongoing concerns about oracle security across networks. Investors, developers, and validators are watching closely as the ecosystem weighs the balance between rapid liquidity deployment and robust checks on data inputs. The incident also invites heightened scrutiny from auditors and potential regulators who track how protocol-level vulnerabilities translate into real losses for lenders.
Recovery Path: Potential Steps and Timelines
While details remain pending, the parties involved have signaled several likely elements of a recovery plan:
- Temporary withdrawal controls and liquidity relief for affected LPs.
- Forensic tracing of the exact funds borrowed and their current on-chain positions.
- Revision of oracle governance to harden signature verification and public-key handling.
- Governance-driven decisions on re-opening asset markets and re-pricing collateral.
Market Signals and Investor Guidance
Price discovery across DeFi wallets can be volatile in the wake of exploits. Traders should anticipate a cautious period as Bonzo Lend and its affiliated entities publish more precise loss estimates, potential clawbacks, and risk controls. Users should monitor the protocol’s official channels for updates on re-opening timelines, collateral requirements, and any changes to interest rates or borrowing caps.
What to Watch Next
Key forthcoming developments include: the exact scope of the compromised price feed, the status of all outstanding loans in Bonzo Lend, and the timeline for a governance vote on recovery measures. As the community awaits more granular post-incident data, participants should regard the zeroed oracle signature unlocked episode as a cautionary tale about the fragility of on-chain data security and the cascading effects on liquidity flows.
Bottom Line
The Bonzo Lend incident—anchored by a zeroed oracle signature unlocked path to a near $9 million loan—has temporarily shuttered withdrawals and triggered a formal review. While the protocol works through recovery options, the event will likely become a reference case for oracle integrity discussions in the Hedera DeFi space and beyond. The next milestones depend on the completion of forensic analyses and the articulation of a credible, community-backed plan to reopen markets in a safer, more resilient form.
Discussion