Bonzo Lending Protocol Loses $9M in Hedera Oracle Exploit
Bonzo Lend lost $9.05 million after an attacker exploited a verification flaw in a Supra oracle contract deployed on Hedera. The exploit triggered a 77% decline in total value locked across the protocol.
Key Takeaways
- 1## The Exploit Bonzo Lend suffered a $9.
- 205 million loss after an attacker found and executed a verification flaw in a third-party Supra oracle contract operating on the Hedera network.
- 3The vulnerability allowed the attacker to manipulate price feeds, enabling unauthorized withdrawals or liquidations against the protocol's collateral.
- 4## Immediate Impact on Bonzo The exploit resulted in a 77% decline in total value locked across Bonzo Lend, according to reports tracking the Hedera-based lending market.
- 5The sharp outflow reflects both direct losses to affected users and broader confidence damage as market participants reassessed counterparty risk on the platform.
The Exploit
Bonzo Lend suffered a $9.05 million loss after an attacker found and executed a verification flaw in a third-party Supra oracle contract operating on the Hedera network. The vulnerability allowed the attacker to manipulate price feeds, enabling unauthorized withdrawals or liquidations against the protocol's collateral.
Immediate Impact on Bonzo
The exploit resulted in a 77% decline in total value locked across Bonzo Lend, according to reports tracking the Hedera-based lending market. The sharp outflow reflects both direct losses to affected users and broader confidence damage as market participants reassessed counterparty risk on the platform.
Oracle Risk Context
The incident underscores ongoing vulnerabilities in third-party oracle integrations, a recurring attack vector in DeFi lending. Bonzo relied on Supra's oracle infrastructure for price verification, and the flaw in that contract—rather than in Bonzo's core logic—demonstrates how protocols remain exposed to risks in their external dependencies even when their own code is sound.
Why It Matters
For Traders
Positions in Bonzo or other Hedera lending protocols face elevated liquidation risk; verify collateral health ratios and monitor oracle pricing spreads against other chains.
For Investors
This reinforces that DeFi yield opportunities on emerging Layer 1s carry compounded risk from both protocol and oracle layer vulnerabilities.
For Builders
Lending protocols should implement circuit breakers or oracle fallback mechanisms when integrating external price feeds, and conduct formal audits of oracle contract code.
