“It’s clear that most of the stolen SUPRA ended up on centralized platforms,” a source close to the investigation told Coin Bureau, highlighting the scale of the recent crypto heist. On July 23, 2026, Solido Money experienced a sophisticated attack that siphoned off nearly 294 million SUPRA tokens, equivalent to roughly $900,000. The breach exploited a critical oracle misassignment, which drastically inflated the perceived collateral value and enabled the hackers to mint excessive CASH tokens that were then cashed out for SUPRA.

Two distinct exploit phases took advantage of the same vulnerability. The first was a single atomic transaction, followed hours later by a manual repeat across five wallets. Together, these operations minted over 800,000 CASH tokens and netted 293.7 million SUPRA. Blockchain security firm PeckShield confirmed that approximately 90% of the compromised tokens belonged to the Supra Foundation, amplifying the incident's impact on the protocol’s treasury. Following the attack, the total value locked (TVL) on the chain plunged to just $950,000.

Solido’s forensic analysis tracked around 85% of the stolen tokens to centralized exchanges. About 220 million SUPRA tokens were funneled into an address suspected to be linked with Gate.io, though the company awaits confirmation from the exchange itself. Another batch from the second wave made stops within exchange-controlled wallets before being consolidated into an omnibus wallet. Solido is urgently urging these platforms to freeze the identified deposits and preserve user records to support potential law enforcement investigations.

This incident shows the persistent risks related to oracle vulnerabilities in DeFi projects. For comparison, the recent waves of hacks targeting foundational protocols have similarly revolved around mispriced assets and exchange liquidity points. The Solido case adds to a growing list of attacks where vast sums are funnelled swiftly into exchanges, complicating recovery efforts and raising questions about centralized platforms’ role in crypto security.