Bonzo Lend Loses $9M in Oracle Price Attack

Bonzo Lend, a DeFi protocol on Hedera, lost $9M when an attacker exploited a price oracle vulnerability from third-party provider Supra, inflating an asset price by a trillion times to borrow assets against minimal collateral. The protocol has suspended lending and is working with ecosystem partners to recover assets. If you're building a DeFi lending protocol, your price feed is now a live attack surface — and you can't trust the oracle provider's internal verification alone. The $9M hole here wasn't in Bonzo's code; it was in Supra's.