Back Pluang

Bonzo Lend loses $9M in exploit via oracle flaw on Hedera network

Pluang • July 12, 2026

DeXe (DEXE) surged 7.04% to $38.16, topping the altcoin gainers due to recent improvements in its governance model, pushing its market cap to $1.78 billion. Other notable gainers include Arbitrum, Uniswap, Worldcoin, and Aave, each rising between 4% ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bonzo Lend Suffers $9M Loss from Oracle Exploit on Hedera On July 11, 2026, Bonzo Lend, a decentralized lending protocol on the Hedera network, experienced a significant security breach resulting in losses of approximately $9 million. An attacker exploited a vulnerability in the third-party oracle provider, Supra, which allowed them to manipulate the price of the SAUCE token. By submitting an inflated price update, the attacker was able to borrow 6.63 million USDC and 34.5 million wrapped HBAR, far exceeding the actual value of their collateral. The exploit stemmed from a flaw in the oracle's signature verification process, which accepted a manipulated price without a valid signature. Bonzo Lend has since paused operations to assess the situation and develop recovery measures. The incident highlights the risks associated with reliance on external oracle systems in decentralized finance. A second account also borrowed funds during the exploit but later identified itself as a white-hat hacker intending to return the assets. Bonzo Finance Labs and the Bonzo Finance Foundation are coordinating recovery efforts and have confirmed that the incident did not originate from vulnerabilities within Bonzo Lend's contracts or the Hedera network. 25 sources 65

Bonzo Lend loses $9M in exploit via oracle flaw on Hedera network

The full story

Extracted Entities

Companies (1)

Platforms (1)