QuantorityHedera lending protocol Bonzo Lend loses $9M in price manipulation exploit
A vulnerability involving price data acceptance on Hedera's Bonzo Lend resulted in significant fund extraction, with a second operator claiming white hat status.
Bonzo Lend, a lending protocol built on the Hedera network, experienced a major security breach resulting in approximately $9 million in extracted funds, according to The Block.
The exploit centered on the protocol's reliance on price updates from Supra, a verification service. Attackers were able to submit manipulated price information that the system accepted, allowing them to overborrow against collateral and drain funds from the protocol.
A second operator then withdrew roughly $1 million through a separate wallet. This individual identified themselves as a white hat hacker—security researchers who identify vulnerabilities—and indicated the borrowed amount would be returned to the protocol. The distinction between the initial $9 million extraction and the self-identified white hat's $1 million withdrawal suggests either multiple attackers or coordinated actors with different claims about their intentions.
The incident highlights ongoing risks in decentralized finance, particularly around oracle systems that provide price data to smart contracts. These data feeds are critical infrastructure for lending protocols, and their compromise can expose platforms to significant losses.
For more details on the Bonzo Lend exploit and its implications, see The Block's full report.
*Source: [The Block](https://www.theblock.co/post/407960/hedera-lending-protocol-bonzo-lend-hit-for-9-million-after-supra-verifier-accepts-manipulated-price-update?utm_source=rss&utm_medium=rss). Summary by Quantority.*
Funding-spike and liquidation-cascade alerts the moment they fire, plus unlimited history and a REST API.
See what's in Pro→How to read this
| Funding APR | Annualized, OI-weighted funding. Positive = longs pay shorts (crowded longs). |
| Percentile 90d | Where current funding sits within the coin's own last 90 days (0–100). |
| Open interest | Total USD value of outstanding perpetual contracts. |
| OI change 24h / 7d | How fast leverage is entering (+) or unwinding (−) over the period. |
| Liquidation skew | Imbalance of forced closures (−1…1): + = more longs liquidated, − = more shorts. |
| Leverage risk | 0–100 composite of funding extremity, OI momentum, liquidations and volatility. |
Read next
Trump's Policy Shifts Drive Market Volatility Across Assets
Three significant policy announcements from Donald Trump sparked notable market movements in early July.
BTC
Corporate Bitcoin Holder Liquidates $87M Position
A company has sold a substantial amount of bitcoin, adding to recent divestments by miners and other institutional holders.
XRP
Ripple CTO Emeritus Says XRP Sales Harm Only Ripple
David Schwartz reiterates his view that Ripple's token sales do not negatively affect individual XRP holders.
Mei-Lin leads Quantority's derivatives research, focusing on perpetual funding regimes, basis term structure and open-interest dynamics across major venues. She previously built futures analytics at an institutional market-data desk.
Stretched markets, building leverage and the research worth reading — one short email.
Every figure here is read directly from Quantority's cross-exchange data. This is descriptive market analysis — a read on positioning, not a forecast, and not financial advice.