Wire · operational-macro
Bonzo Lend Loses $9M in Oracle Price Attack
◆ Sectors
◆ Source
◆ Verified
Fusion42 · 13 July 2026 · Fusion42 review
Bonzo Lend, a DeFi protocol on Hedera, lost $9M when an attacker exploited a price oracle vulnerability from third-party provider Supra, inflating an asset price by a trillion times to borrow assets against minimal collateral. The protocol has suspended lending and is working with ecosystem partners to recover assets.
This Wire brief sits within Fusion42's coverage of Crypto & Web3.
◆ ◆ The Wire takeaway
If you're building a DeFi lending protocol, your price feed is now a live attack surface — and you can't trust the oracle provider's internal verification alone. The $9M hole here wasn't in Bonzo's code; it was in Supra's.
◆ Coverage
1 source · 12 Jul 2026
◆ Related on Wire
◆ Topics