Back Pluang

Bonzo Lend loses $9M in oracle exploit, slashin...

Pluang • July 11, 2026

Bonzo Lend, a decentralized lending platform on Hedera, was exploited for $9.05 million after an attacker manipulated a third-party oracle to inflate token prices falsely. The attacker deposited low-value tokens, triggered a fake price surge, a...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bonzo Lend Suffers $9M Loss from Oracle Exploit on Hedera On July 11, 2026, Bonzo Lend, a decentralized lending protocol on the Hedera network, experienced a significant security breach resulting in losses of approximately $9 million. An attacker exploited a vulnerability in the third-party oracle provider, Supra, which allowed them to manipulate the price of the SAUCE token. By submitting an inflated price update, the attacker was able to borrow 6.63 million USDC and 34.5 million wrapped HBAR, far exceeding the actual value of their collateral. The exploit stemmed from a flaw in the oracle's signature verification process, which accepted a manipulated price without a valid signature. Bonzo Lend has since paused operations to assess the situation and develop recovery measures. The incident highlights the risks associated with reliance on external oracle systems in decentralized finance. A second account also borrowed funds during the exploit but later identified itself as a white-hat hacker intending to return the assets. Bonzo Finance Labs and the Bonzo Finance Foundation are coordinating recovery efforts and have confirmed that the incident did not originate from vulnerabilities within Bonzo Lend's contracts or the Hedera network. 25 sources 65

Extracted Entities

Companies (1)

Bonzo Lend