Solido Traces 84% of 293.7M Stolen SUPRA to Exchanges

Overview

• Solido’s forensic report, which reconstructed the July 23 attack, says an oracle misassignment made collateral look far more valuable and let an attacker mint CASH and sell it for 293.7 million SUPRA in two separate exploit waves.
• On-chain analysis traced roughly 246.9 million SUPRA, about 84% of the total, to wallets that Solido assesses as centralized exchange infrastructure.
• The report identified about 220 million SUPRA moved to a deposit address it believes is linked to Gate.io, but Solido stressed that on-chain evidence cannot confirm exchange ownership without platform verification.
• About 46.8 million SUPRA remained in on-chain wallets when the report was published and Solido has applied contract-level fixes that disable the exploited minting path because front-end shutdowns did not stop a second wave.
• Solido has asked exchanges to hold flagged deposits and preserve account records for law enforcement and the broader outcome will hinge on exchange verification, possible freezes, and any recovery actions which will affect the Supra Foundation and token holders.