Bonzo Lend Loses $9M in Oracle Exploit on Hedera Network
An attacker manipulated SAUCE collateral values via a Supra oracle flaw, draining $9M from Bonzo Lend on Hedera.
A hacker drained $9 million from Bonzo Lend, a decentralized lending protocol on the Hedera network, by exploiting a vulnerability in Supra's on-chain oracle verifier, according to reporting by Cointelegraph. The attack allowed the perpetrator to artificially inflate the value of SAUCE tokens used as collateral, then borrow against that inflated valuation to extract funds from the protocol.
Oracle exploits have become one of the most persistent attack vectors in decentralized finance, as protocols that rely on external price feeds are only as secure as the systems supplying that data. In this case, the flaw resided specifically in Supra's on-chain verifier — the component responsible for validating price data before it is consumed by lending logic — giving the attacker a direct mechanism to manipulate what Bonzo Lend believed collateral was worth.
Read more Pelosi and Trump Share Stakes in the Same 10 Stocks →
The incident underscores a structural risk across DeFi lending markets: when collateral valuations can be manipulated, borrowing limits become meaningless and protocol treasuries are exposed. Bonzo Lend operates on Hedera, a distributed ledger network that positions itself as a more enterprise-grade alternative to Ethereum, making the breach notable for a chain that emphasizes performance and security.
The scale of the loss — $9 million — places this exploit among the more significant DeFi incidents of recent months, though it remains smaller than the nine-figure hacks that have periodically rocked the sector. Investigators and the affected teams have not yet publicly confirmed whether any funds have been frozen or whether the attacker has been identified.
Continue reading at Cointelegraph.
