Solido Money suffers $900,000 SUPRA token loss in oracle exploit

Solido Money disclosed that approximately 293.7 million SUPRA tokens, worth about $900,000, were drained on July 23, 2026 after attackers exploited a pricing error in the protocol’s oracle system. The flaw allowed collateral to be valued far above market price, enabling the minting of CASH that was exchanged for SUPRA. The breach unfolded in two waves, first via a single atomic transaction that extracted roughly 266.8 million SUPRA, then through five follow‑up transactions pulling an additional 26.9 million SUPRA.

Forensic analysis traced about 84 % of the stolen tokens—roughly 246.9 million SUPRA—to centralized exchange infrastructure, with around 220 million SUPRA moving to a suspected Gate.io deposit address. The Solido Foundation, which owned about 90 % of the lost funds, has asked exchanges to preserve and restrict the flagged deposits while it works on a remediation and recovery plan. Security firm PeckShield highlighted the incident as a pricing‑path defect coupled with weak risk limits.