Briefium Intelligence Dispatch
A zeroed signature let a hacker drain nine million dollars from Hedera's biggest lender
July 13, 2026 at 5:05 AM UTC•2d ago
A zeroed signature flaw in Supra’s oracle verifier allowed an attacker to inflate SAUCE’s price, enabling a $9M loan on Bonzo Lend and draining $6.63M USDC plus 34.5M wrapped HBAR. TVL across Hedera DeFi dropped ~40% in 24h; Bonzo paused lending. Supra issued a fix to the verifier on Hedera mainnet as researchers continue audits. This incident highlights systemic risk in third-party price feeds and the need for robust signature checks and cross‑layer security in Hedera DeFi.
External Source
Read the Full Report
This executive summary captures the key intelligence. For the complete dataset, charts, and expert commentary, access the original source.