# Bonzo Lend loses $9 million in Supra oracle exploit on Hedera

**Published:** 2026-07-12T01:23:43.423Z  
**Topic:** Hedera  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/ee75ea4a-9f7d-40ba-ac02-d08e4a3c30f0

Bonzo Lend hit by a $9 million oracle hack on July 11 2026, draining 77% of its TVL and pausing the platform.

Bonzo Lend on Hedera was drained of roughly $9 million after an attacker manipulated the price of the SAUCE token via a flaw in Supra’s on‑chain oracle verifier, wiping out about 77% of the protocol’s value locked on July 11 2026 [4].

| At a glance | |
|---|---|
| Loss | $9 million |
| TVL impact | –77 % |
| Collateral token | SAUCE (inflated price) |
| Catalyst | Supra oracle verifier exploit |

## How the exploit unfolded  
The attacker deposited 250 SAUCE tokens—worth only a few dollars—into Bonzo Lend and then fed a falsified price into Supra’s oracle verifier, inflating the token’s value by roughly twelve orders of magnitude. Within seconds the protocol accepted the overvalued collateral and released about $6.6 million USDC and 34.5 million Wrapped HBAR (WHBAR) to the attacker, with a second wallet extracting an additional $1 million [3][4]. The breach was traced to a verification flaw in Supra’s contract rather than a direct vulnerability in Bonzo’s own code [4].

## Immediate fallout and broader context  
Bonzo Lend and its points program were immediately paused while the team investigated the loss [3]. No public statement has detailed remediation steps, compensation plans, or whether the oracle integration has been patched, leaving users uncertain about the protocol’s security posture [2]. The incident adds to a surge in DeFi exploits: the second quarter of 2026 recorded 83 hacks totalling about $755 million, with cross‑chain bridge attacks alone accounting for $351 million of those losses [1]. Overall, DeFi’s total value locked fell 39% from $115 billion in January to just over $70 billion in June, a decline that analysts link to repeated security breaches eroding user confidence [1].

## Impact on Hedera’s DeFi ecosystem  
Hedera’s DeFi sector, while smaller than Ethereum’s, has been growing, and a breach of this magnitude can stall that momentum. The exploit highlights persistent oracle risks across blockchains; similar attacks have previously hit protocols on Ethereum, BNB Chain, Avalanche, and even Stellar, where a $10 million collateral‑pricing exploit occurred earlier in the year [1][2]. The lack of a swift, transparent response from Bonzo Lend may amplify concerns among liquidity providers and could deter new capital from entering Hedera‑based lending platforms.

## What to watch  
- **Oracle patch status** – monitor any updates from Supra or Bonzo regarding a fix to the verifier contract.  
- **TVL recovery** – watch whether Bonzo Lend’s locked value rebounds toward its pre‑exploit level or continues to decline.  
- **Regulatory scrutiny** – keep an eye on any Hedera or broader DeFi regulatory statements that may arise from the growing hack wave.

The $9 million drain underscores that oracle verification remains a critical vulnerability in DeFi, and the silence from Bonzo Lend leaves the broader Hedera community uncertain about the protocol’s resilience and the sector’s future growth.

## Sources
1. Cointelegraph — [Bonzo Lend loses $9M in oracle exploit on Hedera](https://cointelegraph.com/news/bonzo-lend-9m-oracle-exploit-hedera)
2. The Currency Analytics — [Bonzo Lend Loses $9 Million After Supra Oracle Flaw Hits Hedera](https://thecurrencyanalytics.com/altcoins/bonzo-lend-loses-9-million-after-supra-oracle-flaw-hits-hedera-274683)
3. BeInCrypto — [Hedera-Based Bonzo Lend Loses $9 Million in Oracle Exploit](https://beincrypto.com/hedera-exploit-5-million-ethereum-bridge/)
4. CoinDesk — [Lending protocol Bonzo loses 77% of value locked as $9 million oracle exploit rattles Hedera](https://www.coindesk.com/web3/2026/07/11/lending-protocol-bonzo-loses-77-of-value-locked-as-usd9-million-oracle-exploit-rattles-hedera)

---
Cite as: TrendWatcher, "Bonzo Lend loses $9 million in Supra oracle exploit on Hedera", https://www.trendwatcher.in/article/ee75ea4a-9f7d-40ba-ac02-d08e4a3c30f0