Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Bonzo Lend Oracle Price Manipulation: $9.05M Reported Loss

·Historical incident record

Incident Overview

Bonzo Lend on Hedera was exploited through a third-party oracle (Supra) vulnerability. An attacker submitted a massively manipulated SAUCE price, allowing them to borrow approximately $9.05 million in assets with minimal collateral. The borrowed funds were subsequently swapped on SaucerSwap and bridged to Ethereum via LayerZero (over $5M tracked on-chain). Bonzo Lend paused the protocol shortly after detecting abnormal activity.

Sources & References

Original incident referencehttps://bonzo.finance/blog/bonzo-lend-incident-report-oracle-provider-exploit (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Logic Vulnerability
    Reported loss$ 8,500
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 24,900
  3. Incident date
    Target

    Hinkal

    Attack methodSmart Contract Vulnerability
    Reported loss$ 820,000
  4. Incident date
    Attack methodSmart Contract Logic Vulnerability
    Reported loss$ 270,000
  5. Incident date
    Target

    BonkDAO

    Attack methodGovernance Attack
    Reported loss$ 20,000,000