Solido Cash (Supra): oracle misassignment led to CASH mint / SUPRA out
23 Jul 2026 (verified chase 28 Jul): Solido Cash on Supra (Move) was hit via an oracle misassignment that valued collateral near ~$1 while market was a fraction of that. Attacker minted CASH against the bad price, sold for SUPRA.
7M SUPRA net proceeds; ~84% traced to CEX infrastructure; containment disabled the mint path. 4k USD (Protocol Logic / Oracle Misconfiguration). Grok daily’s ~$900k figure is overstated vs Llama: prefer forensic token totals + Llama USD.
Distinct from Bonzo Lend / Supra Hedera ~$9M (11 Jul) zero-signature verifier bug.
369 take
Oracle config / assignment errors print money the same way bad feeds do. Pulse CDP/lending lesson: wrong collateral mark + weak mint caps = loaded gun.
Do not merge with the separate Supra-on-Hedera verifier bug that hit Bonzo.
Sources