A defect in Supra Oracle verification directly caused Bonzo’s TVL to plunge by 77%—this case is worthy of being included in a DeFi security textbook. Choosing a third-party oracle shouldn’t be taken lightly.

BijeNews reported that in a $9 million oracle vulnerability incident involving the lending protocol Bonzo, it lost about $9.05 million. The attacker exploited a validation flaw in a third-party Supra oracle contract on the Hedera network, causing the locked collateral value of the Bonzo lending protocol to drop by 77%.