DeFi protocol UwU Lend loses $19,3 million in an exploit
The team has suspended the project while the investigation is ongoing
10.06.2024 - 15:17
723
2 min
0
What’s new? Experts at the blockchain analytics platform Arkham Intelligence have reported a possible hack of the decentralized lending protocol UwU Lend. Arkham noted that the protocol may have had vulnerabilities that allowed attackers to withdraw ETH, USDC stablecoins, and other assets totaling $19,3 million.
What else is known? UwU Lend was launched by the former CFO of the Frog Nation project and co-founder of Canadian crypto exchange Quadriga CX, known under the nickname 0xSifu, in September 2022. The project is a fork of the Aave protocol and is used to support loans in the stablecoin Magic Internet Money (MIM).
As revealed back in late 2022 by ZachXBT, an anonymous blockchain researcher known for publishing about hacks and scams in the crypto space, Michael Patryn is hiding under the nickname 0xSifu. Quadriga CX collapsed in 2019 after its founder Gerald Cotten died in late 2018 after failing to leave other people with the keys to the exchange’s vault of customer assets.
At the time, ZachXBT also noted that prior to launching the exchange, Patryn was a member of the Shadow Crew, a group that engaged in identity theft, which he later admitted to. He also co-founded the Wonderland Protocol, from whose treasury he transferred millions of dollars worth of ETH to the crypto mixer Tornado Cash.
The UwU team announced the suspension of the protocol while the incident is being investigated. The developers assured that they are taking all necessary steps to resolve the issue as soon as possible.
Comments from fake UwU accounts with phishing links purportedly to recover lost assets started appearing below the post. Interacting with suspicious websites can lead to the loss of all assets in the crypto wallet.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026


Telegram
Twitter