Odaily2026-07-12 01:34:27Odaily roundup: Grayscale flags tokenized stocks theme, Bonzo Finance loses about $9 million in oracle attackOdaily’s latest morning roundup collected a series of market and crypto industry developments. Tom Lee said that while war has made investors uneasy, the U.S. economy can still achieve a V-shaped recovery. Another item noted that storage chip stocks have fallen more than 20% in recent weeks, with their underlying investment logic facing reassessment. Grayscale said Ethereum, Solana, BNB Chain, Avalanche, and Canton Network could benefit from stock tokenization. In infrastructure news, the Sui Tunnels AI agent experiment set a record with actual TPS reaching 6.086766 million. Metaplanet, which holds 43,000 BTC, is studying digital bonds backed by Bitcoin. Elsewhere, Robinhood Chain’s single-day DEX trading volume surpassed Solana. On the security side, a Russian man was kidnapped in Bali, held for 30 hours, and forced to hand over his crypto accounts, while Hedera-based lending protocol Bonzo Finance suffered an oracle attack with losses of about $9 million.1960
Bonzo2026-07-12 01:19:53Bonzo hit by oracle attack on Hedera, with about $9.05 million lostBonzo, a lending protocol on Hedera, has suffered an oracle attack that resulted in losses of about $9.05 million, according to Techub, which cited Wu Blockchain. The report said the attacker manipulated data and drained funds by exploiting a flaw tied to Supra signatures. Bonzo has confirmed the incident and said the root cause was a defect in Supra’s signature verification. The team has not yet released a follow-up response plan. The incident has also drawn fresh attention from the community to oracle security, especially around data integrity and signature verification in DeFi systems. No additional recovery steps or mitigation details were disclosed in the source material.1910
Bonzo Finance2026-07-11 12:54:49Bonzo Finance loses about $9 million in oracle attack on HederaBonzo Finance, a lending protocol built on Hedera, lost about $9 million in an oracle attack, according to Odaily. In its preliminary incident report, the protocol said the attacker deposited just 250 SAUCE tokens, then submitted a price update that artificially inflated SAUCE by roughly 12 orders of magnitude. Using the overstated collateral value, the attacker borrowed assets far beyond their real worth from the lending pool. Bonzo Finance said the address went on to borrow 6.63 million USDC and 34.5 million wrapped HBAR. The protocol added that the incident was not caused by a flaw in Bonzo Finance’s smart contracts or in the Hedera base network itself. Instead, it traced the issue to a vulnerability in the on-chain oracle validator operated by oracle provider Supra. According to the report, Supra’s validator incorrectly accepted SAUCE price data with a zeroed signature. Supra has since confirmed the issue and completed a fix. The case highlights how oracle failures can expose lending markets even when the core protocol logic is not identified as the direct source of the exploit.1450
