# Bonzo Lend loses $9 M in oracle hack, TVL slumps 77% on Hedera

**Published:** 2026-07-12T01:23:43.423Z  
**Topic:** Hedera  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/01a4356d-450a-4da1-8a1a-d1712fd7627e

Bonzo Finance’s Hedera lending pool was drained of $9 million via a manipulated oracle, wiping 77% of its TVL and triggering a near‑40% drop in Hedera’s total

Bonzo Finance confirmed that an attacker exploited a third‑party Supra oracle on Hedera on July 11, borrowing roughly $9.05 million against a $250 SAUCE token deposit, slashing the protocol’s value‑locked by 77% and sending Hedera’s overall TVL down almost 40% in 24 hours【2】.  

| At a glance | |
|---|---|
| Loss | $9.05 million |
| TVL drop (Bonzo) | –77% |
| Hedera TVL fall | –≈40% in 24 h |
| Catalyst | Supra oracle price manipulation |

## How the exploit unfolded  
The attacker first deposited 250 SAUCE tokens—worth only a few dollars—as collateral, then fed a falsified price update to the Supra oracle, inflating the token’s value by about twelve orders of magnitude. Within seconds the attacker borrowed 6.63 million USDC and 34.52 million wrapped HBAR (WHBAR), equivalent to $9.05 million at the report’s reference HBAR price of $0.06998【2】. A second wallet seized an additional $1 million before the price feed was corrected; its operator later identified as a white‑hat responder promising to return the funds【1】.

## Market fallout  
DefiLlama recorded three hacks in July 2026 totalling over $28 million, with the Bonzo incident contributing the largest single loss. Hedera’s total value locked fell to $25.7 million, a near‑40% contraction from the previous day【2】. The broader DeFi sector has seen a 39% TVL decline from January to June 2026, and Q2 2026 became the most‑hacked quarter on record with 83 exploits and $755 million stolen【3】. These trends suggest heightened risk perception and potential capital outflows from platforms perceived as vulnerable.

## What to watch  
- **Hedera TVL recovery**: Monitor whether total locked value rebounds above $30 million, indicating restored confidence.  
- **Oracle security upgrades**: Track any announced patches or replacements for the Supra oracle on Hedera.  
- **Bonzo Lend status**: Watch for updates on the paused Bonzo Lend pool and its points program, which remain inactive pending recovery work【1】.

The hack underscores the systemic risk posed by third‑party oracle dependencies in DeFi, especially on newer chains like Hedera, and raises questions about the resilience of lending protocols that rely on external price feeds.

## Sources
1. BeInCrypto — [Hedera-Based Bonzo Lend Loses $9 Million in Oracle Exploit](https://beincrypto.com/hedera-exploit-5-million-ethereum-bridge/)
2. CoinDesk — [Lending protocol Bonzo loses 77% of value locked as $9 million oracle exploit rattles Hedera](https://www.coindesk.com/web3/2026/07/11/lending-protocol-bonzo-loses-77-of-value-locked-as-usd9-million-oracle-exploit-rattles-hedera)
3. Cointelegraph — [Bonzo Lend loses $9M in oracle exploit on Hedera](https://cointelegraph.com/news/bonzo-lend-9m-oracle-exploit-hedera)

---
Cite as: TrendWatcher, "Bonzo Lend loses $9 M in oracle hack, TVL slumps 77% on Hedera", https://www.trendwatcher.in/article/01a4356d-450a-4da1-8a1a-d1712fd7627e