Hedera lending protocol Bonzo Lend hit for $9 million after Supra verifier accepts manipulated price update
Hedera's Bonzo Lend protocol suffered a $9 million exploit when Supra's price verifier accepted manipulated data, enabling attackers to borrow assets beyond legitimate collateral. A second wallet flagged itself as white hat, promising fund recovery. The incident highlights oracle manipulation risks in DeFi lending platforms, critical for Indian crypto investors monitoring protocol security and smart contract vulnerabilities before deploying capital.
Key takeaways
- 1Bonzo Lend protocol on Hedera lost $9 million in an exploit involving manipulated price data from Supra's oracle verifier.
- 2Attackers borrowed assets far exceeding collateral value by exploiting the oracle price manipulation vulnerability in the lending protocol.
- 3A second attacker wallet claimed white hat status and pledged to return approximately $1 million of stolen funds.
Coins in this story
Why it matters
Oracle manipulation remains a critical DeFi security risk that directly impacts Indian retail investors' capital safety in lending protocols. This incident underscores the necessity of rigorous smart contract audits and price feed verification before participating in yield-generating platforms.
Related stories
Bonzo Lend loses $9M in oracle exploit on Hedera
An attacker inflated the value of SAUCE collateral and borrowed $9 million from Bonzo Lend through a flaw in Supra’s on-chain oracle verifier....
Crypto won the ETF fight but now the SEC is questioning if things have gone too far
The ETF became one of Wall Street’s most powerful distribution tools because it turned market exposure into an easy-to-use and easy-to-understand retail product. Investors could buy an index, a basket of bonds, a commodity thesis, or a tightly packaged theme from the same account they use for blue-chip stocks. This was so convenient that it […] The post Cryp...
Lending protocol Bonzo loses 77% of value locked as $9 million oracle exploit rattles Hedera
Bonzo Lend lost approximately $9.05 million after an attacker exploited a verification flaw in a third-party Supra oracle contract on the Hedera network....