Exploit Impact and Metrics
Published 7/13/2026, 5:14:24 PM
The $9M exploit of Bonzo Lend on July 11, 2026, revealed a critical cryptographic vulnerability in the Supra oracle infrastructure on the Hedera network. The attack was not a typical price manipulation via market trades, but a signature verification bypass that allowed the attacker to forge price data, inflating the value of collateral by 12 orders of magnitude [Source: https://x.com/ilmeaalim/status/2075905177203417317].
Exploit Impact and Metrics
The exploit resulted in a total loss of approximately $10.05 million, though a portion was secured by a white-hat actor.
| Metric | Value / Detail |
|---|---|
| Total Loss | ~$9.05M (Attacker) + ~$1M (White-hat) [Source: https://x.com/ilmeaalim/status/2075905177203417317] |
| Bonzo TVL Impact | 77% decrease [Source: https://www.coindesk.com/web3/2026/07/11/lending-protocol-bonzo-loses-77-of-value-locked-as-usd9-million-oracle-exploit-rattles-hedera] |
| Hedera Ecosystem TVL | Reported ~40% drop to $25.7M [Note: not independently confirmed] [Source: https://x.com/shuigvn/status/2076324120774778954] |
| Manipulated Asset | SAUCE (Pair 425) [Source: https://x.com/ilmeaalim/status/2075905177203417317] |
| Price Inflation | From ~0.2 HBAR to $10^{30}$ (1 followed by 30 zeroes) [Source: https://x.com/ilmeaalim/status/2075905177203417317] |
Security Risks Revealed
The incident exposed four specific risks regarding Supra oracle's design and its integration into DeFi protocols:
- Cryptographic "Point-at-Infinity" Flaw: The Supra on-chain verifier (
requireHashVerified_V2) failed to validate that signature and key inputs were non-zero. By providing a zeroed BLS signature [0,0], the attacker satisfied the pairing equation because both the signature and the committee public key resolved to the "point at infinity." Hedera’s system contracts (precompile 0.0.8) returnedtrue, validating the forged price [Source: https://x.com/ilmeaalim/status/2075905177203417317]. - Lack of Input Sanity Checks: The verifier lacked basic validation to ensure inputs were not null or zeroed before attempting cryptographic pairing. This allowed a mathematically "valid" but fraudulent update to pass through the system [Source: https://x.com/ilmeaalim/status/2075905177203417317].
- Single-Oracle Dependency: Bonzo Lend relied solely on Supra for assets like SAUCE because Chainlink feeds were unavailable for those specific pairs on Hedera. Without a redundant oracle or a Time-Weighted Average Price (TWAP) fallback, the protocol could not detect the massive price deviation [Source: https://x.com/ilmeaalim/status/2075905177203417317].
- System Contract Edge Cases: The exploit highlighted that even secure cryptographic primitives can fail if the implementation does not account for how specific blockchain precompiles (like Hedera's) handle edge-case inputs [Source: https://x.com/ilmeaalim/status/2075905177203417317].
Current Status
As of July 2026, a fix has been deployed to the Supra verifier contract on the Hedera mainnet. Bonzo Lend remains partially paused, though vaults and staking are reportedly operational [Source: https://x.com/ilmeaalim/status/2075905177203417317]. A white-hat actor who secured ~$1M during the event is currently coordinating the return of those funds [Source: https://x.com/ilmeaalim/status/2075905177203417317].