Bonzo Lend Oracle Exploit Costs $9M in Collateral Manipulation
Vexoda Newsroom
An attacker manipulated the value of SAUCE collateral through a flaw in Supra’s oracle verifier, draining $9 million from Bonzo Lend on Hedera. This incident highlights vulnerabilities in DeFi protoco
On July 11, 2026, the lending protocol Bonzo Lend suffered a significant loss of approximately $9 million due to an oracle exploit involving SAUCE collateral on Hedera. The attacker manipulated the price of SAUCE by inflating its value more than 12 orders of magnitude through a flaw in Supra’s on-chain oracle verifier.
The incident began when the attacker deposited just 250 SAUCE tokens, worth only a few dollars at the time. By submitting a fraudulent price update that carried a zeroed signature, they managed to inflate the token's value dramatically. This allowed them to borrow an enormous amount: 6.63 million USDC and 34.5 million wrapped HBAR from Bonzo Lend’s lending pool.
This case underscores how oracle failures can be exploited in DeFi protocols to drain liquidity, even when other parts of the system remain operational. Bonzo Finance reported that Supra acknowledged the issue and deployed a fix promptly. However, they emphasized that this exploit did not compromise their contracts or Hedera's core network security.
The incident adds to an already concerning trend in 2026 where DeFi protocols have faced increasing pressure from hackers. According to CryptoRank data, the second quarter saw more than $755 million stolen across 83 exploits, with cross-chain bridge hacks accounting for a significant portion of these losses.
This event is particularly noteworthy because it follows similar incidents in other networks. In February, attackers drained around $10 million from a YieldBlox DAO-managed lending pool by manipulating the price path used to value USTRY collateral. These repeated security issues raise concerns about user confidence and potential capital outflows from DeFi platforms.
For traders and investors, this incident highlights the ongoing risks in decentralized finance (DeFi) protocols. It underscores the importance of robust oracle mechanisms and continuous monitoring for vulnerabilities. Future watch points include updates on Supra’s fix implementation and broader security measures across various DeFi applications.
Source: Cointelegraph. Summarized and rewritten by the Vexoda Newsroom. This is market news, not financial advice.