← Supra Oracle — Bonzo Lend Attack Vectorreviewed 2026-10-16 · 19 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Supra Oracle — Bonzo Lend Attack Vector against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
2 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #18[disputed][awaiting moderator]in section: Oracle Dependency Transition on Hedera
“According to reporting, Bonzo Finance shifted from Chainlink oracles to Supra in March 2024, citing Chainlink's absence from the Hedera network at the time.”
reviewerBonzo Finance shifted from Chainlink oracles to Supra in March 2024, citing Chainlink's absence from the Hedera network at the time.The cited source does not contain this claim at all. Independent sources indicate Bonzo was founded/launched in March 2024 using Supra (and Pyth) because Chainlink was not yet on Hedera — this is an initial adoption decision, not a 'migration' away from an existing Chainlink integration — and Bonzo currently uses Chainlink for some assets (HBAR, USDC) alongside Supra, contradicting the implication that Bonzo moved off Chainlink entirely.Proposed correction (not yet applied)According to reporting, Bonzo Finance launched on Hedera in March 2024 using Supra (alongside Pyth) as its oracle provider, citing Chainlink's absence from the Hedera network at the time; Chainlink was added later to cover select assets such as HBAR and USDC. - #19[disputed][awaiting moderator]in the timeline
“Bonzo Finance migrates from Chainlink to Supra oracles on Hedera, citing Chainlink's absence from the network.”
reviewerBonzo Finance migrates from Chainlink to Supra oracles on Hedera, citing Chainlink's absence from the network.Same underlying issue as the corresponding section finding; grouped under the same defect_group. The March 2024 date itself is plausible (consistent with Bonzo's reported launch date) but the 'migration from Chainlink' framing is unsupported and likely backwards.Proposed correction (not yet applied)Bonzo Finance launches on Hedera using Supra (alongside Pyth) as its oracle provider, citing Chainlink's absence from the network at the time; Chainlink is added later for select assets.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #4[unverifiable][awaiting moderator]in section: Entity Background
“The company was co-founded by CEO Joshua Tobkin, CBO Jon Jones, and Victor Ermolaev.”
reviewerSupra was co-founded by CEO Joshua Tobkin, CBO Jon Jones, and Victor Ermolaev.Tobkin is well documented as co-founder/CEO. A co-founder named "Jon" is corroborated by Tobkin's own interview, loosely consistent with "Jon Jones," but I found no independent source confirming the CBO title or the name "Victor Ermolaev" as a co-founder. The cited Tracxn page returned HTTP 403 to automated fetch so I could not check it directly. - #10[unverifiable][awaiting moderator]in section: The Supra Oracle Verifier Vulnerability
“CEO Joshua Tobkin stated publicly that 'the identity-element check alone would have prevented this attack.'”
reviewerTobkin is quoted making three specific statements: 'the identity-element check alone would have prevented this attack'; the vulnerable code was 'live, transparent, for two years'; and AI-assisted analysis 'reads every line, every branch, every edge case' with 'a persistence no human auditor can match.'None of these three exact quoted phrases could be located in any source I could reach, including the sources cited for this section and additional targeted web searches for the exact wording. The general theme (two-year exposure, AI-assisted discovery) is independently corroborated by Protos, but the specific wording attributed to Tobkin here could not be verified and may be a paraphrase presented as a direct quote. This is not contradicted by another source, so it is unverifiable rather than disputed, but it is a notable sourcing weakness given these are quotation-marked statements attributed to a named individual. - #11[unverifiable][awaiting moderator]in section: The Supra Oracle Verifier Vulnerability
“Critically, Tobkin acknowledged that the vulnerable code had been 'live, transparent, for two years' before exploitation, visible to all on-chain yet undetected by any human auditor. He attributed the eventual discovery to AI-assisted code analysis, describing a new adversarial capability that 'reads every line, every branch, every edge case' with greater persistence than human review.”
reviewerTobkin acknowledged that the vulnerable code had been 'live, transparent, for two years' and attributed discovery to AI-assisted code analysis 'that reads every line, every branch, every edge case.'Same underlying sourcing issue as the preceding finding; grouped together since both are specific exact-quote renderings of the same Tobkin statement that could not be verified word-for-word.
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #5[partially supported][awaiting moderator]in section: Entity Background
“As of mid-2026, Supra has raised approximately $47.9 million across 30 distinct investors, with notable backers including Coinbase Ventures, Animoca Brands, HashKey Capital, Prosus Ventures, and Valor Equity Partners.”
reviewerAs of mid-2026, Supra has raised approximately $47.9 million across 30 distinct investors, including Coinbase Ventures, Animoca Brands, HashKey Capital, Prosus Ventures, and Valor Equity Partners.The cumulative $47.9M figure and named backers are corroborated by independent funding trackers and Supra's own funding release. The specific count of "30 distinct investors" could not be independently confirmed; both cited sources (Tracxn, CryptoRank) returned HTTP 403 to automated fetch. - #17[partially supported][awaiting moderator]in section: Supra's Public Response and Bounty Offer
“Tobkin publicly offered the attacker a negotiated settlement: retain $100,000, return the remainder of the stolen funds, receive immunity from prosecution, and accept a standing job offer at Supra. He established a 72-hour return window and provided a dedicated recovery address (publicly cited as 0x913BDd...1cC). He also stated that a non-returning attacker would face a growing bounty — increasing 10% annually, indefinitely.”
reviewerTobkin publicly offered the attacker a settlement: keep $100,000, return the rest, receive immunity, and get a job offer, with a 72-hour window, a specific recovery address (0x913BDd...1cC), and a bounty that grows 10% annually if funds are not returned.Independent web search corroborates the full substance of the bounty offer (amount, immunity, job offer, 72-hour deadline, the address 0x913BDd807608DEA920C689a7c3222E94e07551cC, and the 10% annual escalation), attributing these specifics to Rekt News and a 'CryptoReal News' report — neither of which is cited in this section. The source actually cited for this section (CoinSpectator) does not itself substantiate most of these specific terms; it is a thin repost. The underlying facts appear correct, but the citation is weak/mismatched.
confirmed
12 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in the summary
“On July 11, 2026, Hedera's largest lending protocol Bonzo Lend lost approximately $9.05 million after an attacker exploited a signature verification flaw in Supra's on-chain oracle verifier contract.”
reviewerOn July 11, 2026, Bonzo Lend lost approximately $9.05 million after an attacker exploited a signature verification flaw in Supra's on-chain oracle verifier.Widely corroborated across official report and multiple independent outlets (The Block, CoinDesk, Rekt, Protos). - #2[confirmed][no action needed]in section: Selective Patching: 11 Chains Before Hedera
“One of the most significant findings of the post-incident investigation is that Supra deployed a security patch resolving this verifier flaw to at least 11 blockchain deployments between June 29 and July 3, 2026 — more than a week before the Hedera attack — but left the Hedera deployment unpatched.”
reviewerThe vulnerable code had been live for at least two years and was deployed to 11 other chains, all patched in the days before the Hedera attack, while Hedera remained unpatched.Directly confirmed by WebFetch of the cited Protos article, including the Anura and Khan attributions and quotes used on the page. - #3[confirmed][no action needed]in section: Entity Background
“Supra (formerly SupraOracles) is a cross-chain oracle and blockchain infrastructure platform founded in 2020 and headquartered in Miami, Florida.”
reviewerSupra was founded in 2020, is headquartered in Miami, and Joshua Tobkin is CEO.Could not directly fetch the cited Tracxn page (403), but independent trackers and press releases corroborate the founding year, HQ, and CEO. - #6[confirmed][no action needed]in section: Entity Background
“Supra's oracle protocol research is led by Dr. Aniket Kate, credited with inventing KZG Polynomial Commitments.”
reviewerSupra's oracle protocol research is led by Dr. Aniket Kate, credited with inventing KZG Polynomial Commitments.Confirmed via independent sources; Kate is a real co-inventor of the KZG scheme and is documented as Supra's lead research scientist. - #7[confirmed][no action needed]in section: The Supra Oracle Verifier Vulnerability
“The attack succeeded because the verifier accepted an invalid committee ID (value 2) that fell outside Supra's populated range. Instead of rejecting the out-of-range ID, the contract's lookup returned a public key of all zeros.”
reviewerThe exploit mechanism: an out-of-range committee ID returned a zero public key, which paired against a zeroed BLS signature to make the pairing check return true, bypassing requireHashVerified_V2.Mechanism is corroborated by the official incident report, Rekt News, and a third secondary report citing Bonzo's analysis. The specific numeric committee-ID value of 2 appears in only one secondary report I could access and could not be independently cross-confirmed, though nothing contradicts it. - #8[confirmed][no action needed]in section: The Supra Oracle Verifier Vulnerability
“Security researcher Cos summarized the flaw: 'both sides of the underlying mathematical verification equation simultaneously became 0.'”
reviewerSecurity researcher Cos stated that 'both sides of the underlying mathematical verification equation simultaneously became 0.'Exact quote verified against the cited source. - #9[confirmed][no action needed]in section: The Supra Oracle Verifier Vulnerability
“Bonzo Finance's own incident report described the outcome as: 'The verifier trusted a correct answer to the wrong question.'”
reviewerBonzo Finance's incident report described the outcome as: 'The verifier trusted a correct answer to the wrong question.'Exact quote verified against the cited official source. - #12[confirmed][no action needed]in section: Audit Gaps and Accountability
“However, Bonzo's bug bounty policy explicitly excluded 'third-party contracts not directly associated with Bonzo Finance,' meaning the Supra verifier was out of scope for both Bonzo's audits and its bounty program.”
reviewerBonzo Lend passed audits by Halborn, but its bug bounty excluded 'third-party contracts not directly associated with Bonzo Finance,' leaving the Supra verifier out of scope; Supra's only named audit (MoveBit) covered an Aptos implementation, and the Hedera verifier was never formally audited.All sub-claims directly confirmed against the cited Rekt News post-mortem. - #13[confirmed][no action needed]in section: Attack Mechanics and Execution Timeline
“At 00:39:53 UTC, Wallet A deposited 250 SAUCE tokens — worth approximately $3 at market prices — as collateral into Bonzo Lend.”
reviewerDetailed attack timeline on July 11, 2026 (deposit, reconnaissance update, manipulated update, two borrows, Wallet B activity, price restoration, pause).All timestamps and amounts in this section match the official incident report exactly. - #14[confirmed][no action needed]in section: Attack Mechanics and Execution Timeline
“Wallet A ultimately received approximately $5.25 million equivalent (reported as 2,360 ETH and 15.58 WBTC). Funds were subsequently routed through Tornado Cash.”
reviewerStolen assets were bridged via LayerZero and Stargate to Arbitrum, Base, and Ethereum; Wallet A received ~$5.25 million (2,360 ETH, 15.58 WBTC); funds were routed through Tornado Cash; a white-hat separately recovered ~$1 million.Confirmed against the cited Rekt News post-mortem. - #15[confirmed][no action needed]in section: Financial Impact and Market Consequences
“Bonzo Lend's total value locked (TVL) fell by approximately 77% within 24 hours of the exploit. The Hedera network's aggregate DeFi TVL declined by approximately 40% in the same period, falling to approximately $25.7 million.”
reviewerBonzo Lend's TVL fell ~77% within 24 hours; Hedera's aggregate DeFi TVL fell ~40% in the same period to ~$25.7 million.Both figures confirmed directly against the cited CoinDesk article. - #16[confirmed][no action needed]in section: Systemic Risk to Supra-Dependent Protocols
“The Solido Money protocol separately suffered an exploit on July 23, 2026, involving a pricing error in its Solido Cash product and the SUPRA token, resulting in approximately 293.7 million SUPRA tokens stolen (worth near $900,000 at the time), though that incident had distinct mechanics from the Bonzo verifier flaw.”
reviewerThe Solido Money protocol suffered a separate exploit on July 23, 2026 involving a pricing error in Solido Cash and the SUPRA token, resulting in ~293.7 million SUPRA stolen (~$900,000 at the time).Figures confirmed directly against the cited article.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.