Bonzo Lend Exploited for $9M After Supra Verifier Accepts Manipulated Price Update
Hedera-based lending protocol Bonzo Lend lost $9 million after a manipulated price update was accepted by the Supra oracle verifier.
Hedera-based lending protocol Bonzo Lend suffered a $9 million exploit after a malicious price update was accepted by the Supra oracle verifier, according to a report from The Block.
The Attack
The attacker manipulated the price feed via the Supra verifier, allowing them to borrow assets against inflated collateral. Bonzo Lend confirmed the incident on social media, noting that the exploit targeted its HBARX liquidity pools.
A second wallet borrowed an additional $1 million but identified itself as a white hat hacker and stated that the funds would be returned. Bonzo Lend said it is working with partners to recover assets and investigate the vulnerability.
Context
Bonzo Lend is a decentralized lending protocol built on the Hedera network. Supra provides oracle price feeds to multiple DeFi platforms. The incident highlights ongoing risks associated with oracle manipulation in decentralized finance.