UwU Lend drained for $3.7 million in second exploit this week
Quick Take
- Around $3.7 million was stolen from UwU Lend today, according to blockchain security firms.
- The decentralized lending protocol was hacked for about $20 million on June 10, after which UwU stated that the vulnerability had been fixed.
Decentralized lending protocol UwU Lend was hacked for $3.7 million today, according to blockchain security firms Beosin and Blocksec.
This exploit marks the second time UwU Lend has been compromised this week via flash loans, with security analysts attributing both attacks to the same perpetrator.
The stolen $3.7 million in assets currently sits in the attacker’s wallet address after being converted to ether.
The lending protocol was attacked the first time on June 10, which led to a loss of $20 million. Beosin identified the prior incident as a flash loan exploit that manipulated the price oracles of sUSDe stablecoin on the platform.
UwU Lend had acknowledged the first exploit and provided an additional update the following day, stating it had identified and resolved the security vulnerability. The protocol claimed the vulnerability was unique to the sUSDe market oracle.
UwU Lend was established by Michael Patryn, who has also operated under the aliases Omar Dhanani and 0xSifu. Patryn had co-founded QuadrigaCX, a cryptocurrency exchange that ultimately collapsed amidst allegations of fraud.
The lending protocol did not immediately respond to The Block’s request for comment.
Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.
© 2025 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
