UwU Lend Temporarily Suspends Operations Following $23M Hack Incident

UwU Lend, a decentralized finance (DeFi) platform established by Sifu, ex-CFO of Frog Nation, encountered a significant security breach


UwU Lend, a decentralized finance (DeFi) platform established by Sifu, ex-CFO of Frog Nation, encountered a significant security breach resulting in a loss of approximately $19.4 million.

The attack, initially identified by the cybersecurity firm Cyvers, involved a sophisticated manipulation of Oracle sources that oversee asset pricing.

Within a mere six minutes, the perpetrators executed three rapid transactions, converting stolen Wrapped Bitcoin (WBTC) and Dai (DAI) into Ethereum (ETH) using funds sourced from the controversial mixer, Tornado Cash.

Details of the Oracle Manipulation Attack

On June 10, the attack unfolded at breakneck speed, with Cyvers detecting the anomaly and raising the alarm via social media. The attackers manipulated the price feed for the sUSDe asset, exploiting vulnerabilities in the aggregation method that pulls data from various sources.

This manipulation led to erroneous price reports that facilitated the illicit withdrawal of funds. UwU Lend responded by freezing all platform activities, reducing lending and borrowing rates to zero, and commencing an in-depth investigation into the breach.

“In light of recent events, we’ve taken immediate action to secure our platform and review our systems to prevent future incidents,” stated a representative from UwU Lend on their official communication channel.

The Aftermath and Response to the Attack

Michael Patryn, the founder of UwU Lend known as 0xSifu, has proactively offered a settlement to the hacker, proposing a return of $16 million in stolen assets in exchange for amnesty from prosecution.

This offer aims to mitigate the impact of the hack and recover a substantial portion of the lost funds. The stolen cryptocurrencies, including WETH, WBTC, and various stablecoins, remain in two digital wallets, closely monitored by the crypto community and authorities.

Cyberspace security analysts predict that the total value of crypto assets stolen in 2024 might exceed the figures recorded in 2023, driven by the increased market value of these assets.

“The allure of high-value digital assets continues to draw sophisticated cybercriminals, underscoring the critical need for robust security measures in the blockchain ecosystem,” commented a cybersecurity expert from Peckshield, which had audited UwU Lend’s protocols and found them previously secure.

http://twitter.com/jer_iee/status/1800907558971990455

UwU Lend reassures its users that despite the setback, most of the platform’s funds, including newer cryptocurrencies like SIFU and FRAX, remain secure and unaffected by the hack. The firm is committed to enhancing its security measures to safeguard against future attacks and restore trust among its users.

ABOUT THE AUTHOR See More
Arslan Butt
Index & Commodity Analyst
Arslan Butt serves as the Lead Commodities and Indices Analyst, bringing a wealth of expertise to the field. With an MBA in Behavioral Finance and active progress towards a Ph.D., Arslan possesses a deep understanding of market dynamics. His professional journey includes a significant role as a senior analyst at a leading brokerage firm, complementing his extensive experience as a market analyst and day trader. Adept in educating others, Arslan has a commendable track record as an instructor and public speaker. His incisive analyses, particularly within the realms of cryptocurrency and forex markets, are showcased across esteemed financial publications such as ForexCrunch, InsideBitcoins, and EconomyWatch, solidifying his reputation in the financial community.

Related Articles

Comments

0 0 votes
Article Rating
Subscribe
Notify of
0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments

HFM

Doo Prime

XM

Best Forex Brokers