Bonzo Lend Suffers $9M Loss in Hedera Oracle Exploit

Bonzo Lend, a decentralized lending platform on the Hedera network, fell victim to a $9 million exploit on July 11, 2026. An attacker manipulated the value of SAUCE collateral by exploiting a flaw in Supra’s on-chain oracle verifier, allowing them to borrow significantly more than the collateral's actual value.

The exploit involved inflating the reported value of the SAUCE token, tricking Bonzo Lend’s smart contracts into approving a much larger loan than should have been possible. Supra, the provider of the oracle service, has acknowledged the issue and is working to address the vulnerability. Bonzo Lend has paused operations to assess the damage and prevent further losses.

This incident underscores the risks associated with DeFi platforms, where smart contracts and oracle services can be targeted by sophisticated attackers. For everyday users, it serves as a reminder to be cautious when using less-established DeFi protocols and to diversify their investments to mitigate risks.

Bonzo Lend users should monitor official channels for updates on the platform’s recovery and any potential compensation for affected users. Supra’s response to the exploit and any improvements to their oracle verifier will be critical to restoring trust in the ecosystem.