Hedera Lending Protocol Bonzo Loses $9M in Oracle Exploit

A major security breach struck Bonzo Finance, a lending protocol built on the Hedera network, wiping out approximately $9 million and collapsing the platform's total value locked by 77%, according to a CoinDesk report. The attack exploited a vulnerability in the protocol's price oracle system, the mechanism that feeds real-world asset prices into smart contracts — a recurring weak point across decentralized finance platforms.

Oracle exploits have become one of the most common attack vectors in DeFi, allowing bad actors to manipulate the price data that lending protocols rely on to calculate collateral values and trigger liquidations. When those price feeds are corrupted, attackers can borrow against artificially inflated collateral or drain liquidity pools before the system can respond. Bonzo's incident fits a pattern that has cost the broader DeFi sector hundreds of millions of dollars over the past several years.

Read more Broadcom Lands $30B Apple Deal, Boosting Non-AI Revenue →

The swift destruction of nearly four-fifths of Bonzo's locked assets underscores the fragility that smaller, emerging DeFi protocols face when security infrastructure lags behind growth. Hedera, the proof-of-stake network underpinning Bonzo, markets itself as an enterprise-grade blockchain with high throughput and low fees, but the exploit demonstrates that the security of applications built on top of any chain ultimately depends on the robustness of their own smart contract design and data feeds.

For users who had deposited funds into Bonzo in search of yield, the incident is a stark reminder of the counterparty and technical risks embedded in DeFi lending. As the protocol and its team assess the damage, the wider Hedera ecosystem will be watching closely to see whether the breach triggers broader confidence concerns for projects building on the network.

Continue reading at CoinDesk.