Bonzo Lend, Hedera's largest lending protocol, confirmed a $9.05 million loss due to an oracle exploit on July 11, 2026. An attacker manipulated the price feed for SAUCE tokens by submitting a zeroed signature that the oracle verifier mistakenly accepted, inflating the token's price by twelve orders of magnitude. This allowed the attacker to borrow far beyond the actual collateral value. A white-hat responder borrowed $1 million during the incident and pledged to return the funds, which are excluded from the loss total. Bonzo Lend's lending pool and points program were paused, while other protocol components remained unaffected. The oracle provider has fixed the flaw, and recovery efforts are ongoing with transparency as a priority.
Bonzo Finance, Hedera's largest lending protocol, lost about $9.05 million after an attacker exploited a flaw in a third-party price oracle's signature verification. The attacker manipulated the SAUCE token price, using only 250 SAUCE tokens as colla...
Bonzo Lend, a decentralized lending protocol on the Hedera network, lost about $9.05 million after an attacker exploited a flaw in a third-party Supra oracle contract. The attacker manipulated the price of low-value SAUCE tokens to borrow assets far ...
Security firm Peckshield reported a suspected exploit on the Hedera network where $5.25 million was stolen and bridged to Ethereum. The attacker’s wallet, initially funded through the crypto mixer Tornado Cash, now holds about 2,360 ETH and 15.58 wra...
An attacker stole $5.25 million from the Hedera network by exploiting a vulnerability that allowed bridging assets to Ethereum using LayerZero technology. The stolen funds were then laundered through Tornado Cash, a privacy mixing service, making rec...
A suspected exploit on the Hedera network has resulted in the transfer of over $5.8 million in assets to Ethereum, according to blockchain security researchers Specter and PeckShield. The attacker used LayerZero to bridge funds and swapped Wrapped Bi...
