Bonzo Lend loses $9M in Hedera oracle exploit

The lending protocol Bonzo Lend suffered a major security breach on July 11. An attacker managed to drain approximately 9.05 million dollars from the platform by exploiting a verification vulnerability within a third party Supra oracle contract.

The exploit started with a small deposit of 250 SAUCE tokens. The attacker then submitted a manipulated price feed, which allowed them to borrow significantly more capital than their collateral should have permitted. This tactic effectively tricked the protocol into authorizing massive withdrawals.

This incident highlights the ongoing risks associated with relying on third party price data providers. Security teams are still analyzing the full scope of the incident to see if any user funds can be recovered or if the protocol can be made whole. Traders should watch for updates from the development team regarding potential reimbursement plans or security patches for the Hedera network.

The market for lending protocols remains sensitive to these types of technical failures. Investors should remain cautious and keep an eye on how decentralized finance projects manage their oracle dependencies moving forward.