Hedera network exploit: hackers steal millions via Supra oracle bug and SAUCE price manipulation

On the night of 10–11 July 2026, attackers exploited a bug in the Supra external oracle on the Hedera network. They artificially inflated the price of the SAUCE token and used it to borrow millions of dollars' worth of assets from the Bonzo Lend protocol. The stolen funds were almost immediately bridged to Ethereum, and Bonzo Lend has been suspended.