UwU Lend

The UwU Lend protocol, which was hacked for nearly $20 million on June 10, is under attack again in an ongoing cryptocurrency exploit.
Onchain data analytics platform Cyvers alerted the protocol to the attack, claiming the attackers were the same as the ones who&nbsp;<a href="https://cointelegraph.com/news/uwu-lend-hack-20-million">carried out the previous $20 million exploit</a>.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/beb3c308-61b1-4f96-8006-b0631818ff3e.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CyversAlerts/status/1801160124033093748" target="_blank" rel="noopener nofollow">Cyvers Alerts</a>
 </figcaption>
</figure>
The ongoing exploit has already stolen $3.5 million from different asset pools, namely uDAI, uWETH, uLUSD, uFRAX, uCRVUSD and uUSDT. All stolen assets have been converted to Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>) and are located at the attacker’s address:&nbsp;<a href="https://etherscan.io/address/0x841ddf093f5188989fa1524e7b893de64b421f47" target="_blank" rel="noopener nofollow">0x841dDf093f5188989fA1524e7B893de64B421f47</a>.
<h2 data-ct-non-breakable="true" id="first-exploit-was-caused-by-price-manipulation">First exploit was caused by price manipulation</h2>
The latest exploit for the lending protocol occurred within three days of the $20 million exploit, and UwU started the reimbursement process earlier today, just hours before the second exploit.&nbsp; 
The first UwU Lend exploit was caused by price manipulation. The attacker first used a flash loan to swap USDe for other tokens, which led to a lower price of Ethena USDe (USDE) and Ethena Staked USDe (SUSDE). The attacker then deposited the tokens to UwU Lend and lent more SUSDE than expected,&nbsp;driving the USDE price higher.
Similarly, the attacker deposited SUSDE to UwU Lend and borrowed more Curve DAO (CRV) tokens than expected. Ultimately, the attackers stole nearly $20 million in tokens through price manipulation. The exploiter then converted all the stolen funds into ETH.
Related: <a href="https://cointelegraph.com/news/crypto-hacks-2024-private-key-leaks">Crypto hacks increase in 2024, but smart contracts not to blame</a>
<h3 data-ct-non-breakable="true" id="uwu-was-in-the-process-of-reimbursing-previous-hack-victims">UwU was in the process of reimbursing previous hack victims</h3>
The lend protocol was in the process of reimbursing hack victims and took to X to announce that it had repaid all bad debt for the Wrapped Ether (wETH) market, amounting to 481.36 wETH worth over $1.7 million. In total, the protocol reimbursed over $9.7 million.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/4f8a2d97-e9d6-45f6-bc0a-aa752429d276.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/UwU_Lend/status/1801115678340005966" target="_blank" rel="noopener nofollow">UwU Lend</a>
 </figcaption>
</figure>
UwU claimed that it had identified the vulnerability responsible for the exploit, which it said was unique to the USDe market oracle. 
The protocol <a href="https://x.com/UwU_Lend/status/1800864462825787824" target="_blank" rel="noopener nofollow">claimed</a>&nbsp;the vulnerability had been resolved and that all other markets had been “re-reviewed by industry professionals and auditors with no issues or concerns found.”
Crypto security firm CertiK told Cointelegraph that the ongoing exploit is not the same vulnerability but is a consequence of having been exploited on June 10. CertiK explained that the attacker gained a number of sUSDE tokens from the first exploit, which they were still holding.
 Although the protocol was paused, “the UwULend protocol still considered sUSDE as legitimate collateral, which allowed the attackers to exploit the remaining sUSDE and drain the remaining pools of the UwULend protocol,” CertiK said.
Magazine: <a href="https://cointelegraph.com/magazine/cailtlyn-jenner-token-scammer-sahil-arora-celebrity-network-leaked-price-list/">Caitlyn Jenner meme coin ‘mastermind’s’ celebrity price list leaked</a>

UwU Lend faces second hack during $20M reimbursement process

Table of Contents

Cointelegraph

Other articles published on Jun 13, 2024

Ripple’s New Stablecoin: A ‘Real USD’ for the Digital Age

Taiwan Announces Launch of Crypto Association Amid Regulatory Developments

Notcoin Price Jumps 14% Overnight! NOT Price To Surge 100% This June?

MoonBag Beating BitBot and Fantom as the Leading Top Crypto Presale: To Reach $1 After Burns

MicroStrategy Plans $500M Convertible Note Sale to Boost Bitcoin Portfolio

Top 20 Cryptocurrency Wallets in 2024

Join our free newsletter for daily crypto updates!