Hedera Ecolending Agreement Bonzo Finance was attacked by a prophecies machine, resulting in a loss of about $9 million

On 11 July, Bonzo Finance, a loan agreement based on Hedera, was attacked by a prophecies machine, resulting in a loss of approximately $9 million. The attackers borrowed assets of far more than real value from the agreement, using collateral that had been exceptionally raised by the SAUCE token price. The preliminary accident report issued by Bonzo indicated that the attackers had deposited only 250 SAUCEs and had subsequently submitted a price update, which artificially raised the currency price by about 12 orders of magnitude, followed by loans of $6.63 million from the loan pool to USDC and 34.5 million sealed HBAR (wHBAR). It is alleged that the attack was not a breach in the Bonzo smart contract or in the Hedera bottom network itself, but was the result of a loophole in the Predictator certifier on the Supra chain, a prognosis servicer, who mistakenly accepted a SAUCE price data with zero signatures, and Supra has now identified the problem and completed the repairs。