A single manipulated price feed let an attacker turn 250 SAUCE tokens worth a few dollars into $9.05 million in borrowed USDC and wrapped HBAR in eight seconds.
The exploit underscores the critical need for robust oracle solutions in DeFi, highlighting systemic vulnerabilities that could deter investor confidence.
An attacker inflated the value of SAUCE collateral and borrowed $9 million from Bonzo Lend through a flaw in Supra’s on-chain oracle verifier.