The Cryptocurrency Post The CryptocurrencyPost
AboutContact
Security

Solido Money Reports ~$293.7M SUPRA Drained in Exploit

Fotorrealistic DeFi oracle breach: mispriced collateral draining SUPRA to exchanges, neon city, hacker silhouette.

Solido Money has released a forensic report detailing a multi-wave exploit that resulted in the drain of approximately 293.7 million SUPRA tokens. The incident, which occurred on July 23, reportedly stemmed from a pricing vulnerability in the protocol’s oracle system.

According to Solido’s findings, the attacker exploited an oracle misassignment that allowed collateral to be valued at nearly $1.00, despite its market price being significantly lower. This discrepancy enabled the minting of 809,052 CASH, which was subsequently exchanged for SUPRA. The report indicates that approximately 90% of the affected funds belonged to the project’s foundation.

Forensic Tracing and Exchange Activity

The forensic analysis by Solido suggests that roughly 84% of the exploit proceeds, totaling 246.9 million SUPRA, have been traced to centralized exchange infrastructure. Specifically, the report identifies approximately 220 million SUPRA that was allegedly moved to a suspected Gate.io deposit address during the first wave of the attack.

Blockchain security firm PeckShield flagged the report via social media. The available evidence highlights two distinct stages of the exploit:

  • First Wave: Executed via a single atomic transaction involving the large-scale transfer to exchange infrastructure.
  • Second Wave: Carried out manually several hours later across five separate wallets using the same oracle flaw.

Current Status and Recovery Efforts

Solido Money stated that its findings are based on on-chain reconstructions and do not identify specific individuals. The protocol has requested assistance from centralized exchanges to help preserve and recover the identified funds. At the time of the report, approximately 46.8 million SUPRA remained in on-chain wallets controlled by the attacker.

While the report concludes the event was caused by insufficient risk limits and oracle mispricing rather than a reentrancy bug, external confirmation from the involved exchanges regarding the receipt of funds remains outstanding. Solido has indicated that a formal remediation and recovery plan is expected to be shared in the coming days.