Hedera-based DeFi 'Bonzo Lend' Loses $9 Million Due to Oracle Vulnerability
Bonzo Lend Suffers $9 Million Loss from Oracle Vulnerability
On July 11, a security breach occurred in the lending protocol "Bonzo Lend (Bonzo Finance)" operating on the Hedera (Hedera/HBAR) network, exploiting a flaw in the price reference system, resulting in damages of approximately $9 million (around 1.35 billion yen).
It appears that hacking involving the Hedera network is ongoing, with over $3.7 million already bridged to Ethereum by the attackers. The stolen funds are currently being exchanged from WBTC to ETH after being bridged from the Hedera network via Layerzero.
For safety reasons, the protocol and point program have been temporarily suspended. The incident began when on-chain researcher Specter tracked suspicious fund movements flowing to Ethereum (Ethereum/ETH). The investigation revealed that the attackers deposited a mere 250 SAUCE tokens (worth a few dollars) as collateral and exploited a bug in the system, causing its valuation to skyrocket by about 12 digits. Based on this fictitious asset value, they fraudulently borrowed 6.63 million USDC and 34.5 million Wrapped HBAR (WHBAR) from the pool.
Additionally, another wallet that withdrew about $1 million (around 160 million yen) during the same period claimed to be a white hat (ethical hacker) and expressed intentions to return the funds.
The Cause: Defect in Price Oracle, Not Smart Contracts
Regarding this incident, Bonzo stated that there were no issues with their smart contracts or the core Hedera network, but rather the cause lies with the external price supply system— the oracle.
Specifically, there was a serious defect in the on-chain oracle verifier of the data provider Supra. This verifier accepted tampered SAUCE price data with zero signatures, invalidating existing legitimate signatures. As a result, the manipulated abnormal high price was directly reflected in the protocol. Supra has already acknowledged the issue and applied a fix.
Increasingly Sophisticated Price Manipulation and Ongoing Trials in the 2026 DeFi Market
As seen in this case, even if the network or application itself is functioning normally, methods that exploit distortions in price data to siphon off liquidity have occurred in the past.
In February of this year (2026), the Stellar-based "YieldBlox DAO" lost approximately $10 million (around 1.6 billion yen) due to similar price route manipulation.
Moreover, in 2026, cybercrime targeting cryptocurrency platforms has been on the rise. In July alone, attacks on "Summer.fi" amounting to $6 million (around 970 million yen) and a governance attack on "BONK DAO" for $20 million (around 3.23 billion yen) have contributed to a total damage exceeding $28 million (around 4.5 billion yen). According to data companies, the second quarter of 2026 recorded the highest number of incidents at 83 (with damages around 122.28 billion yen). The theft of administrative privileges and price manipulation accounted for 37% of the total incidents.
These successive security breaches have led to user distrust, with the total value locked (TVL) in DeFi (decentralized finance) assets, which was approximately $115 billion (around 18.6 trillion yen) at the beginning of the year, decreasing by about 39% to just over $70 billion (around 11.3 trillion yen) by June, putting the entire industry in a challenging position.
Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.
You may also like

Kospi: South Korean Stock Market Suspended for the 6th Time This Year, AI Bubble Wavers

How AI is Changing Work and Assets: A Special Discussion with Hirozo Kano and Keisuke Tanaka at bitFlyer|WebX2026

Bitcoin Ignores War and Global Selloff: What Changed

Ripple backs UK tokenization plan targeting £33B annual boost

Korea's National Fortune Stocks Collapse on Day 15 After World Cup Exit

Robinhood Provides Answers: Why Ethereum Becomes the Optimal Solution After Entering the Real Economy

The Strongest Whale in the World Cup Prediction Market? Trading 380 Times Daily, Raking in $10.32 Million

GTN Bets on Brazil to Expand Fintech Access to Global Markets

Fed Monetary Policy Report 2026: What It Means for Bitcoin, Crypto Liquidity, and the Next Bull Market
The Federal Reserve's July 2026 Monetary Policy Report reveals why interest rates are likely to stay higher for longer, how AI is reshaping the economy, and what these structural changes mean for Bitcoin, crypto liquidity, and the next bull market.

The Over 20% Drop of Storage Giants: Did Meta's Sale of Computing Power Shatter AI Infrastructure Faith?

Morgan Stanley Analysis: Nvidia Has 42% Upside, Where Will Growth Come From?

Experts Predict Bitcoin Will Surge to $500,000 by 2029! Historical Data Casts Doubt: The 'Myth of Explosive Growth' May Fade Away

Interpreting Zhipu AI's Internal Letter: The Tide Has Arrived, No Monetization After Listing, Betting on the Most 'Cash-Intensive' AGI Path

The Hottest New Public Chain of 2026, Backed by a Brokerage

Altcoin Season Index Indicates Momentum Shift Beyond Bitcoin

Tokenized Equity is Disrupting the One-Stop Financing Business of VCs

IMF Warns Dollar-Pegged Stablecoins Improve Foreign Currency Access but Amplify Risks of Currency Crises and Bank Runs

This Week's Market Watch: Not Just CPI, But Whether Global Capital Costs Will Be Revised Up Again

Senate Democrats renew push for hearings into Trump’s crypto holdings

The 4000 UAH Banknote Would Also Be Useful - What Authorities and Experts Say About the Introduction of the 2000 UAH Note

What Did NVIDIA Say in the Closed-Door Roadshow? What Rumors Were Addressed?

USDT Market Cap Surpasses Ethereum: Why Has the Value of Public Chains Not Increased in Sync?

Is Saylor’s leveraged Bitcoin play hurting the market?

Want Another Bull Market? Bitcoin Needs Trillions in New Capital to Enter

U.S. Housing Bill Including CBDC Ban Set to Pass Without Trump's Signature

Ethereum More Energy Efficient than Solana According to Cambridge

Moving Assets Should Be Effortless: WEEX Rebuilds the Withdrawal Experience From the Ground Up

XRP holders helped Ripple resist SEC pressure, Deaton says

Evernorth expands into Japan as $1B XRP treasury plan moves forward






