Loading data, please wait a moment. We are fetching the latest content from the server and validating, organizing, and rendering it to ensure the information you see is accurate, complete, and up to date. Loading speed may be affected by your network, device performance, or the current amount of data, so a brief wait is normal. To avoid extra delays caused by duplicate requests, please don't refresh frequently or repeatedly click buttons, and don't close the page or switch to an offline network. The page will update automatically once the data is ready. If it takes noticeably longer, check your network connection and try refreshing or coming back later. If the issue persists, please let us know so we can investigate. Thanks for your patience and understanding.
Total MarketCap: $0 0
24H Vol: $0.00
BTC:
0 sat/vB
ETH: Gwei
Bonzo lost approximately $9 million in an oracle attack, where the attacker manipulated the SAUCE price to borrow a large amount of assets.
MetaEraJul 11, 2026
On July 12 (UTC+8), Bonzo Finance, a lending protocol built on Hedera, suffered an oracle attack, resulting in losses of approximately $9 million. The attacker exploited collateral—SAUCE tokens whose price had been artificially inflated—and borrowed assets from the protocol far exceeding their actual value.
According to Bonzo’s preliminary incident report, the attacker deposited only 250 SAUCE tokens (worth just a few dollars) and then submitted a single price update that artificially inflated the token’s price by roughly 12 orders of magnitude. Subsequently, the attacker borrowed $6.63 million in $USDC and 34.5 million wrapped $HBAR (wHBAR) from the lending pool.The incident reportedly originated from a vulnerability in $Supra’s on-chain oracle validator, which erroneously accepted SAUCE price data with a zeroed-out signature. $Supra has confirmed the issue and completed its fix. Bonzo emphasized that this attack did not stem from any vulnerability in Bonzo’s smart contracts or the underlying Hedera network itself.Data shows that Q2 2026 has become the quarter with the highest number of attacks in cryptocurrency industry history, with 83 security incidents recorded and total losses amounting to approximately $755 million. Among these, cross-chain bridge attacks accounted for roughly $351 million in losses, while admin key compromises and fake token price manipulation accounted for 37% of the quarter’s total losses.Amid ongoing security incidents, the DeFi sector’s total value locked (TVL) has declined from approximately $115 billion in January to over $70 billion in June—a cumulative drop of 39%. According to CryptoRank, the industry has experienced 121 security incidents year-to-date, with total losses reaching approximately $942 million. Persistent security issues may further erode user confidence and accelerate capital outflows.Notably, in February, YieldBlox—a lending protocol in the Stellar ecosystem—experienced a similar incident. The attacker manipulated the USTRY collateral price path to steal approximately $10 million in assets from its lending pool. (Source: PANews)[ME News]
Powered by ChatGPTAll You Need to Know in 10s