The attack targeted a verification flaw in a third-party Supra oracle contract integrated with Bonzo Lend, a lending protocol operating on the Hedera network. By manipulating price data fed through the compromised oracle, the attacker drained roughly $9.05 million from the platform. The incident wiped out about 77% of Bonzo's total value locked, underscoring how vulnerabilities in external data feeds can cascade into major losses for connected protocols. Oracle exploits remain a persistent threat across decentralized finance, where lending platforms depend on accurate price inputs to manage collateral and liquidations. The breach also drew attention to Hedera, a network that has sought to position itself as an enterprise-focused blockchain. The scale of the loss relative to Bonzo's holdings highlights the concentration risk facing smaller DeFi platforms and the importance of securing third-party integrations.
— Sponsored —
Trade smarter on BYDFI
Get a bonus on your first deposit — from $50 at $100, up to $2,000 at $20k. 200x leverage, 600+ perpetuals, deep liquidity.