Bonzo Finance, Hedera's largest lending protocol, lost about $9.05 million after an attacker exploited a flaw in a third-party price oracle's signature verification. The attacker manipulated the SAUCE token price, using only 250 SAUCE tokens as collateral to borrow millions in USDC and wrapped HBAR. Bonzo's lending contracts functioned correctly, but the oracle verifier failed to reject invalid inputs, allowing the exploit. A second wallet borrowed around $1 million, later claiming white-hat status and pledging to return the funds. Bonzo paused lending pools and is working on remediation and user access with partners, but no reimbursement plan or withdrawal reopening date has been announced yet.
Bonzo Lend, Hedera's largest lending protocol, confirmed a $9.05 million loss due to an oracle exploit on July 11, 2026. An attacker manipulated the price feed for SAUCE tokens by submitting a zeroed signature that the oracle verifier mistakenly acce...
Bonzo Lend, a decentralized lending protocol on the Hedera network, lost about $9.05 million after an attacker exploited a flaw in a third-party Supra oracle contract. The attacker manipulated the price of low-value SAUCE tokens to borrow assets far ...
Security firm Peckshield reported a suspected exploit on the Hedera network where $5.25 million was stolen and bridged to Ethereum. The attacker’s wallet, initially funded through the crypto mixer Tornado Cash, now holds about 2,360 ETH and 15.58 wra...
An attacker stole $5.25 million from the Hedera network by exploiting a vulnerability that allowed bridging assets to Ethereum using LayerZero technology. The stolen funds were then laundered through Tornado Cash, a privacy mixing service, making rec...
A suspected exploit on the Hedera network has resulted in the transfer of over $5.8 million in assets to Ethereum, according to blockchain security researchers Specter and PeckShield. The attacker used LayerZero to bridge funds and swapped Wrapped Bi...
