Hedera Confirms Bonzo Lend Exploit Isolated to Smart Contract, Mainnet Stable

Cryptorank

Hedera Confirms Bonzo Lend Exploit Isolated to Smart Contract, Mainnet Stable

First seen 12 Jul 2026, 01:42 UTC • •39.9

Article Content

1 / 4

Browse articles

ThreatCluster •July 13, 2026 at 00:42 UTC

•The exploit was limited to the Bonzo Lend smart contract, not the Hedera mainnet.
•No evidence of compromise to Hedera's consensus algorithm or core services was found.
•Affected users should stay updated on recovery efforts from Bonzo Lend.

Hedera announced that the recent exploit affecting Bonzo Lend, a DeFi application, was due to vulnerabilities in its smart contract and not the Hedera mainnet. The exploit led to the loss of user funds but did not compromise the network's consensus algorithm or core services. Hedera's mainnet remains fully operational, with no interruptions to transaction processing. The incident emphasizes the importance of application-level security in DeFi and the need for thorough audits. Affected users are advised to monitor updates from Bonzo Lend regarding fund recovery efforts. The situation reflects ongoing challenges in the DeFi ecosystem regarding smart contract security. Hedera's response aims to mitigate reputational damage and reinforce user trust.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 90d ago How this analysis works

Timeline

2026-07-11

Hedera confirms Bonzo Lend exploit details

Hedera stated the exploit was isolated to Bonzo Lend's smart contract, ensuring mainnet stability.

2026-07-11

Bonzo Lend exploit results in user fund loss

The exploit led to significant losses for users of the Bonzo Lend DeFi application.

More articles in this cluster (3)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

Bonzo Lend

Affected Platform (1)

Hedera

Relationships

Data Breach targets Hedera
Data Breach related to Bonzo Lend

Following this threat?

Track Bonzo Lend in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…