Bonzo Lend Loses $9M in Oracle Manipulation Attack, Attacker Used Only 250 SAUCE as Collateral
On July 11, 2026, Hedera-based DeFi lending protocol Bonzo Lend suffered an oracle manipulation exploit, losing ~$9 million. The attacker deposited just 250 SAUCE (worth a few dollars), manipulated its price by 12 orders of magnitude via a Supra verifier flaw, and drained USDC and wrapped HBAR.








