Bonzo Exploit Drains $9M From Hedera’s Largest Lending Protocol, Underscoring Cross‑Chain Oracle Risk

Hedera’s Bonzo lending protocol suffered a $9.05 million exploit due to an oracle/signature verification flaw on Supra, triggering a pause of all activity. The incident highlights DeFi security risks on Hedera, especially with single-source price feeds and cross-chain oracles. Bonzo is pursuing recovery initiatives, but details on compensation or treasury adequacy remain unclear. The event underscores the need for multi-source price feeds and stronger oracle redundancy as Hedera’s DeFi ecosystem matures.