Solido Cash (Supra): oracle misassignment — CASH mint / SUPRA out
23 Jul 2026 (verified chase 28 Jul): Solido Cash on Supra (Move) was hit via an oracle misassignment that valued collateral near ~$1 while market was a fraction of that. Attacker minted CASH against the bad price, sold for SUPRA. Solido forensic (via AMBCrypto 27 Jul): two waves — one atomic, then five wallets — minted ~809k CASH and ~293.7M SUPRA net proceeds; ~84% traced to CEX infrastructure; containment disabled the mint path. DeFiLlama hacks table lists ~$73.4k USD (Protocol Logic / Oracle Misconfiguration). Grok daily’s ~$900k figure is overstated vs Llama — prefer forensic token totals + Llama USD. Distinct from Bonzo Lend / Supra Hedera ~$9M (11 Jul) zero-signature verifier bug.
369 take: Oracle config / assignment errors print money the same way bad feeds do. Pulse CDP/lending lesson: wrong collateral mark + weak mint caps = loaded gun. Do not merge with the separate Supra-on-Hedera verifier bug that hit Bonzo.