Borç verme protokolü Bonzo, 9 milyon $ oracle istismarı Hedera'yı sarstığı için kilitlenen değerin % 77 'sini kaybetti

Bonzo Lend lost approximately $9.05 million after an attacker exploited a verification flaw in a third-party Supra oracle contract on the Hedera network.

By Francisco Rodrigues|Edited by Nikhilesh DeUpdated Jul 13, 2026, 8:12 a.m. Published Jul 11, 2026, 6:06 p.m. 1 min readMake preferred on Share this articleMake preferred on

Summary

• Bonzo Lend lost approximately $9.05 million after an attacker exploited a verification flaw in a third-party Supra oracle contract on the Hedera network.
• The attacker deposited low-value SAUCE tokens and submitted a manipulated price update to inflate the tokens' value, enabling them to borrow assets well beyond their collateral.
• Following the exploit, Hedera's total value locked (TVL) fell by nearly 40% in 24 hours, while Bonzo's TVL plummeted by 77%.

Bonzo Lend, a decentralized lending protocol on the Hedera network, suffered an estimated $9.05 million loss after an attacker exploited a verification flaw in a third-party Supra oracle contract, allowing them to borrow assets far exceeding the value of their collateral.

The attacker deposited 250 SAUCE tokens with little value, before submitting a manipulated price update that inflated the token’s HBAR-denominated value, according to a preliminary incident report from Bonzo.

The protocol said the account subsequently borrowed 6.63 million USDC and 34.52 million wrapped HBAR. At the report’s reference HBAR price of $0.06998, the two withdrawals were worth approximately $9.05 million.

A second wallet, the report adds, borrowed roughly $1 million of additional assets while the abnormal price remained active. The wallet later contacted Bonzo through Discord, identified itself as a white-hat responder to the incident and said it intended to return the funds.

Bonzo excluded those assets from its headline loss estimate, placing total principal borrowed during the incident at approximately $10.06 million before recovery.

Hedera, according to DeFLlama data, now has $25.7 million in total value locked (TVL). The figure dropped nearly 40% in the last 24 hours after the exploit. Bonzo’s TVL plunged 77% in the period.

UPDATE (July 13, 08:12 UTC): Adds dropped words in final sentence.

Web3Crypto NewsLatest Crypto News Latest Research

Gate Leads Spot Market Share Gains as CEX Volumes Rise for First Time in Five Months

Gate Leads Spot Market Share Gains as CEX Volumes Rise for First Time in Five Months

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

By CoinDesk ResearchJul 13, 2026

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

Why it matters:

CEX trading volumes rose for the first time in five months in June, with spot climbing 15.3% to $1.11T and RWA perpetual volumes surging to a record $311B.

View Full ReportMore From Web3

Here is why a massive $1.6 billion in crypto liquidity is sitting idle and wasting away

Airbnb CEO says X account was hacked, attacker posted AI-slop on tokenization

BNB Chain is building a new layer-1 for high-frequency trading and AI agents