Skip to main content
AVOID.NET

v2 → v3

Scores

trust_score39 → 38
severity_base39 → 39
score_modifier0 → -1.4

Sections

Protocol Background

unchanged

July 11, 2026 Oracle Exploit — Attack Mechanics

unchanged

Root Cause: Supra Oracle BLS Signature Verification Flaw

unchanged

Fund Movement and On-Chain Trail

unchanged

Market and Ecosystem Impact

unchanged

Protocol Response and Recovery Plan

unchanged

Audit Scope and Oracle Risk Considerations

unchanged

Timeline events

No timeline changes.

Accepted submissions

+ addedurlincriminating{"url":"https://www.coindesk.com/web3/2026/07/11/lending-protocol-bonzo-loses-77-of-value-locked-as-usd9-million-oracle-exploit-rattles-hedera","additional_urls":["https://rekt.news/bonzo-finance-rekt","https://www.cryptotimes.io/2026/07/11/hederas-biggest-defi-lender-bonzo-lend-hacked-for-9m-5-25m-bridged-to-ethereum/"]}

Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.

v2 hash: b2cebf6eb08aa2b1d4f883bdaf080696b5374fcffc348a0d90979d58d8e67928
v3 hash: E1aPP7CCv9pKWascTgjYjQyFLjYpHLpYi7jzgUsDPzGM