Solido Money Tokens Worth $900K Stolen in Oracle Exploit Breach

Solido Money has suffered a massive security breach after attackers exploited an oracle configuration error in its protocol, stealing approximately 293.7 million SUPRA tokens.

The attack occurred on July 23, 2026, and the protocol's forensic analysis revealed that the attackers conducted two distinct exploit operations. The first operation involved depositing overvalued collateral to generate CASH tokens, which were then converted into SUPRA.

The second operation distributed the activity across five different wallets through manual execution, generating a total of 809,052 CASH tokens and extracting 293.7 million SUPRA in total proceeds. Blockchain security company PeckShield verified the incident and indicated that approximately 90% of the compromised assets belonged to the Solido foundation itself.

The stolen funds were tracked by blockchain forensics, revealing that roughly 246.9 million SUPRA tokens (84%) were transferred to infrastructure associated with centralized cryptocurrency exchanges. The remaining 46.8 million SUPRA remained in on-chain wallets when the forensic report was released.