Bonzo TVL Plunges 77% After $9M Oracle Exploit on Hedera

Bonzo, a Hedera-based lending protocol, saw its total value locked (TVL) drop 77% after an oracle exploit siphoned roughly $9 million from the platform—one of the largest security incidents to date on the Hedera network. The attack focused on Bonzo's oracle setup, the price-feed system lending markets use to value collateral and execute liquidations. The incident report released by Bonzo said the breach originated at the oracle provider layer rather than from a flaw in Bonzo's own smart contracts. That distinction is significant, as vulnerabilities at the oracle level can impact any protocol relying on the same data source. The losses triggered a rapid wave of withdrawals. TVL is widely treated as a key confidence gauge for lending protocols, and a decline of this scale typically reflects depositors prioritizing capital flight over waiting for clarity on whether their individual positions were affected. With liquidity and collateral exiting the system, the protocol's ability to operate as an active lending market is materially impaired. For users who still have funds deposited, the recovery outlook remains uncertain. While Bonzo has attributed the root cause to its oracle provider, it has not outlined a compensation or reimbursement plan for affected depositors. The event also highlights the broader risk profile of oracle dependence across DeFi. Hedera's DeFi segment is relatively small compared with other chains, which makes a $9 million exploit disproportionately impactful for network-level sentiment. Protocols that share the same oracle provider may now reassess their exposure, reinforcing the industry push toward stronger automated defenses and diversified oracle sources. Bonzo's next steps will likely hinge on whether the team can recover funds, mitigate the vulnerability, and restore trust as reflected in its depleted TVL. Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.