How Does Bonzo Finance Work?
Bonzo Finance is the largest lending protocol on Hedera, forked from Aave v2. On July 11, 2026, an attacker exploited a signature verification flaw in the Supra oracle verifier to inflate SAUCE collateral prices by ~12 orders of magnitude and drain $9.05M in USDC and WHBAR. Bonzo Lend and Points are paused pending a Halborn audit of new redemption contracts; the Hedera Foundation has committed a credit facility to restore all pre-exploit user positions. The BONZO token launched on Kraken in April 2026 and governance remains inactive.
TVL
$3M
Sector
Lending
Risk Grade
C+
Value Grade
D
Core Mechanisms
6.1.1
Over-collateralized lending with calibrated LTV ratios for HBAR, HTS tokens, and stablecoins, forked from Aave v2
Standard Aave v2 over-collateralization model adapted to Hedera Token Service
6.2.2
Kinked utilization interest rate curves inherited from Aave v2 for dynamic rate setting
Standard Aave-style rate model with per-asset parameterization
6.4.4
Multi-oracle setup using Chainlink, Pyth, and Supra with fallback redundancy for collateral pricing
Triple oracle redundancy reduced single point of failure risk in theory; Supra verifier exploited July 2026 via zeroed BLS signature bypass
6.3.2
Fixed-spread liquidation mechanism inherited from Aave v2 with incentive bonus for liquidators
Standard liquidation mechanism — effectiveness depends on liquidator availability on Hedera
5.1.1
BONZO token governance for protocol parameter changes and strategic direction
Token holders can stake for xBONZO and participate in governance voting; full DAO launch still pending post-exploit
7.3.1
Bonzo Points seasonal system rewarding protocol participation, convertible to BONZO tokens
Pre-season concluded March 9, 2026; BONZO token launched on Kraken April 8, 2026; Season 1 paused following July exploit
How the Pieces Interact
Limited liquidator infrastructure on Hedera compared to Ethereum/L2s could lead to delayed liquidations during market stress, accumulating bad debt
Oracle fallback switching during volatile markets could cause temporary pricing discrepancies, leading to incorrect liquidation triggers; the broader oracle attack surface was exploited on July 11, 2026 when Supra's verifier accepted a zeroed BLS signature, inflating SAUCE collateral by ~12 orders of magnitude
Points farming could distort lending utilization as users deposit and borrow primarily for points rather than genuine lending demand
Governance could approve aggressive LTV parameters for new assets to attract TVL, increasing systemic risk across the protocol
Supra's BLS signature verifier accepted zeroed signatures (public key and signature both at elliptic curve point at infinity) because the pairing equation evaluated to zero on both sides; an attacker exploited this on July 11, 2026 to submit arbitrary price updates and borrow $9.05M against $3 of actual collateral
What Could Go Wrong
- Oracle exploit on July 11, 2026 drained $9.05M via Supra signature verification bypass; Bonzo Lend paused with $9M unrecovered and relaunch contingent on Hedera Foundation credit facility
- Single-chain deployment on Hedera means oracle infrastructure (Supra) was left unpatched for 8+ days after the same vulnerability was fixed on 11 other chains, demonstrating ecosystem-specific maintenance risk
- TVL collapsed from ~$16M (points-driven peak) to ~$3M before the exploit as the points pre-season ended March 2026; post-exploit recovery TVL depends on third-party backstop, not organic protocol demand
Liquidation Failure Due to Thin Hedera DeFi Infrastructure
ModerateTrigger: Sharp HBAR price decline triggers mass liquidations, but insufficient liquidator bots on Hedera cannot process them in time
- 1.HBAR price drops 30%+ in a short period due to broader crypto downturn — Multiple lending positions become undercollateralized simultaneously
- 2.Limited liquidator infrastructure on Hedera cannot process the volume of liquidations needed — Undercollateralized positions persist, accumulating bad debt
- 3.Bad debt exceeds the liquidation incentive spread — Remaining liquidations become unprofitable, further reducing liquidator participation
- 4.Lenders realize their deposits are backed by undercollateralized positions — Depositors rush to withdraw, creating a liquidity crisis
- 5.Protocol cannot meet withdrawal demand as funds are locked in bad debt positions — Some depositors face losses; protocol reputation on Hedera is damaged
Risk Profile at a Glance
Overall: C+ (42/100)
Lower score = safer