SUPRA

SolidoMoney

2026-07-28 19:18:11

SolidoMoney exploited, with about 294 million SUPRA stolen

SolidoMoney was hit by an exploit on July 28, with roughly 294 million SUPRA taken, according to a Techub News brief citing PeckShieldAlert. The alert said the attacker had already moved about 220 million SUPRA to a Gate exchange address. Around 90% of the affected funds were said to belong to the foundation. The project team has confirmed the attack but has not released the detailed cause or any compensation plan. Because most of the impacted assets were held by the foundation, direct user losses appear to be relatively limited based on the information available so far. Users connected to the project are being advised to pause interactions until an official security notice is released. No additional details on the exploit path, recovery progress, or remediation steps were disclosed in the source update.

860

Morgan Stanle

2026-07-28 13:53:27

Morgan Stanley Asset Management launches spot ETH and SOL ETPs as Kalshi losses, x402 flaws and options lawsuit draw scrutiny

Morgan Stanley Investment Management has rolled out two new crypto exchange-traded products, adding spot Ethereum and Solana exposure to its existing Bitcoin lineup. The new products, MSSE and MSOL, are listed on NYSE Arca with 0.14% fees and are expected to stake part of their ETH and SOL holdings, while the firm says it will not retain staking rewards. The daily roundup also highlighted several other developments. Prediction market platform Kalshi’s parlay bets have led retail traders to lose about $294 million, with research pointing to systematic overpricing in cross-event parlays. A July 21 study said 15 major x402 payment providers had 31 previously unknown vulnerabilities affecting 99% of relevant transactions during the study period, though it did not conclude that all x402 payments or Coinbase itself were vulnerable. Elsewhere, Solido Money said an attack led to the theft of about 293.7 million SUPRA, with around 220 million tokens sent to suspected Gate deposit addresses. In a separate case tied to Futu and Tiger Brokers options trading, a lawsuit brought by Susquehanna and Citadel Securities now involves more than 310 accounts, with plaintiffs seeking over $137 million in allegedly suspicious profits.

2550

Supra

2026-07-22 06:39:13

Supra Expands Bounty With $1M Token Challenge for Faster Parallel EVM Engine

Supra has added a personal $1 million token bounty from CEO Joshua Tobkin for any team that can prove a faster, verifiably correct parallel EVM execution engine than SupraBTM under public test conditions.

660

Bonzo Lend

2026-07-14 05:07:17

Bonzo Lend exploit tied to zero-signature oracle flaw, losses reach about $9.05 million

Bonzo Lend, a lending protocol built on Hedera, remains paused after an oracle verifier accepted a proof containing a zero signature and a zero public key, allowing one wallet to borrow roughly $9.05 million against 250 SAUCE worth only a few dollars. According to the incident review cited in the report, wallet A posted a manipulated SAUCE/wHBAR price update at 00:51 UTC, inflating the token’s value by about 12 orders of magnitude while the market price stayed near 0.2 HBAR. Eight seconds after the bad price reached onchain oracle storage, the wallet borrowed 6.63 million USDC and then 34.5 million wrapped HBAR. Bonzo said its lending contracts simply used the stored oracle price and executed under the protocol’s loan-to-value rules. A second wallet borrowed about $1 million while the abnormal price remained active, then contacted Bonzo and identified itself as a white hat responder that intended to return the funds. Bonzo said about $1 million has been recovered in its accounting, though the money has not yet been returned and the final amount is still uncertain. Supra has fixed the verifier, but Bonzo Lend, Bonzo Points, and withdrawals were still suspended as of July 13.

2620

Bonzo Lend

2026-07-13 19:48:08

Bonzo Lend hit by more than $10 million in abnormal borrowing after Supra oracle flaw on Hedera

Bonzo Lend, a lending protocol on Hedera, was exploited on July 11 after an attacker abused a verification flaw in a third-party Supra oracle contract. Bonzo’s preliminary incident report said the attacker posted 250 SAUCE tokens worth only a few dollars as collateral, then pushed a manipulated price update that sharply inflated the token’s value against HBAR. That account went on to borrow 6.63 million USDC and 34.52 million wrapped HBAR, worth about $9.05 million at the report’s reference HBAR price. A second wallet borrowed roughly $1 million more while the abnormal price remained live, then contacted Bonzo on Discord, described itself as a white-hat responder, and said the funds would be returned. That brought total abnormal borrowing to about $10.06 million before any return. Bonzo later said its protocol had been paused and remains paused while recovery work continues. Supra Labs said the incident stemmed from a degenerate BLS signature and a zero-valued public key that its Hedera verifier incorrectly accepted for a single SAUCE/wHBAR feed, adding that its core aggregation system and other feeds were not affected. After the exploit, Hedera’s TVL dropped nearly 40% over 24 hours, while Bonzo’s TVL fell 77%. DefiLlama now lists Bonzo at $3.06 million in TVL.

1790

Bonzo

2026-07-12 01:19:53

Bonzo hit by oracle attack on Hedera, with about $9.05 million lost

Bonzo, a lending protocol on Hedera, has suffered an oracle attack that resulted in losses of about $9.05 million, according to Techub, which cited Wu Blockchain. The report said the attacker manipulated data and drained funds by exploiting a flaw tied to Supra signatures. Bonzo has confirmed the incident and said the root cause was a defect in Supra’s signature verification. The team has not yet released a follow-up response plan. The incident has also drawn fresh attention from the community to oracle security, especially around data integrity and signature verification in DeFi systems. No additional recovery steps or mitigation details were disclosed in the source material.

2020

Bonzo Finance

2026-07-11 12:54:49

Bonzo Finance loses about $9 million in oracle attack on Hedera

Bonzo Finance, a lending protocol built on Hedera, lost about $9 million in an oracle attack, according to Odaily. In its preliminary incident report, the protocol said the attacker deposited just 250 SAUCE tokens, then submitted a price update that artificially inflated SAUCE by roughly 12 orders of magnitude. Using the overstated collateral value, the attacker borrowed assets far beyond their real worth from the lending pool. Bonzo Finance said the address went on to borrow 6.63 million USDC and 34.5 million wrapped HBAR. The protocol added that the incident was not caused by a flaw in Bonzo Finance’s smart contracts or in the Hedera base network itself. Instead, it traced the issue to a vulnerability in the on-chain oracle validator operated by oracle provider Supra. According to the report, Supra’s validator incorrectly accepted SAUCE price data with a zeroed signature. Supra has since confirmed the issue and completed a fix. The case highlights how oracle failures can expose lending markets even when the core protocol logic is not identified as the direct source of the exploit.

1600

SUPRA

2026-07-08 10:50:20

SUPRA Price Prediction 2025-2030: Can the Cross-Chain Dark Horse Ride the Alt Season Wave?

As of Jan 13, 2025, SUPRA trades at ~$0.02516. This article analyzes its potential price trajectory from 2025 to 2030 based on market trends, alt season expectations, and project fundamentals, highlighting opportunities and risks in the cross-chain and DeFi sectors.

650