UwU Lend Suffers Second Hack in a Week, Losing $3.7 Million

As a crypto investor who has been through the QuadrigaCX fiasco, I’m deeply concerned about the latest developments with UwU Lend. The fact that the same hacker was able to exploit the protocol twice within a week is alarming and highlights ongoing security challenges.


As a researcher investigating recent developments in the decentralized finance (DeFi) sector, I’ve come across disturbing news regarding UwU Lend, a popular DeFi lending protocol. Two significant hacking incidents have occurred within the same week, with both attacks leading to a loss of approximately $3.7 million in ether for the platform, according to reputable blockchain security firms The Block Sec and Beosin. The same attacker is believed to be responsible for both breaches. Currently, the ill-gotten assets are under the control of the malicious actor.

Details of the Attack

On June 10, I unfortunately witnessed the first exploit of UwU Lend, where cunning attackers took advantage of flash loans to manipulate the sUSDe stablecoin price oracles. This deceitful act resulted in a significant loss of $20 million. In the aftermath, UwU Lend announced that they had identified and rectified the underlying security vulnerability. They described it as being exclusive to the sUSDe market oracle.

Today’s cyberattack serves as a reminder of the persistent security threats facing the protocol, in spite of previous guarantees. Experts suspect that the two incidents may be linked, indicating potential involvement from the same culprit.

On June 10, the attacker successfully exploited UwU_Lend for approximately $3.7 million, marking the second time this individual has carried out such an attack against them using the address 0x841dDf093f5188989fA1524e7B893de64B421f47.

— Beosin Alert (@BeosinAlert) June 13, 2024

Background and Response

Michael Patryn, who goes by the aliases Omar Dhanani and 0xSifu, launched UwU Lend. He previously teamed up to create QuadrigaCX, a defunct cryptocurrency exchange, which later suffered from bankruptcy due to fraudulent activities.

Following the initial occurrence, UwU Lend acknowledged the issue and declared that the vulnerability had been addressed. Yet, today’s assault unveiled persisting flaws in the protocol that warrant additional attention.

As a concerned crypto investor, I can’t help but raise questions about the current security protocols following the latest string of exploits. Despite the efforts made to address the initial vulnerabilities, I can’t help but wonder if these measures are robust enough to withstand future attacks.

An additional incident of a double security breach within a week underscores the importance of strong security measures in decentralized finance systems to safeguard users’ investments and preserve faith in the infrastructure.

Read More

Sorry. No data so far.

2024-06-13 18:28