Published • loading... • Updated
Bonzo Lend Loses $9M After Oracle Flaw Inflates SAUCE Price
Bonzo said the attacker deposited 250 SAUCE worth only a few dollars before borrowing 6.63 million USDC and 34.5 million wrapped HBAR.
- On Saturday, the Hedera-based lending protocol Bonzo Lend lost about $9 million after an attacker exploited a flaw in Supra's on-chain oracle verifier to manipulate SAUCE collateral prices.
- Bonzo reported that the attacker deposited 250 SAUCE, worth only a few dollars, before submitting a price update that inflated the token's value by roughly 12 orders of magnitude.
- Using the manipulated collateral, the attacker's wallet borrowed 6.63 million USDC and 34.5 million wrapped HBAR from the lending pool, allowing the account to borrow far beyond the value deposited.
- Supra acknowledged the flaw and deployed a fix, while Bonzo stressed that the incident was not a vulnerability in its own contracts or Hedera's core network.
- This breach adds to a growing number of exploits targeting DeFi protocols in 2026, as CryptoRank recorded 121 hacks and roughly $942 million in losses over the period.
Insights by Ground AI
17 Articles
17 Articles
Bonzo Exploit Drains $9M From Hedera’s Largest Lending Protocol, Underscoring Cross‑Chain Oracle Risk
Lending markets on alternative layer‑1 networks rarely command the attention of their Ethereum‑mainnet peers—until a multimillion‑dollar drain forces the issue. That moment came for Hedera’s Bonzo on July 11, when the protocol disclosed it had lost roughly $9.05 million in an oracle manipulation attack. The incident, first documented in the original report, immediately spotlighted the fragility of price feeds on chains where liquidity is thinner…
Coverage Details
Total News Sources17
Leaning Left0Leaning Right0Center3Last UpdatedBias Distribution100% Center
Bias Distribution
- 100% of the sources are Center
100% Center
C 100%
Factuality
To view factuality data please Upgrade to Premium
