UwU Lend
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 10 → 55. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -6.4 |
| Problems around it, caused by others | -0.8 |
| Long-running | +4 |
| Sum | 55 |
Score: 55/100 (kept between 0 and 100)
How scoring works →Summary
UwU Lend is an Ethereum-based DeFi lending protocol forked from Aave V2, launched in September 2022 and operated by Michael Patryn (known pseudonymously as 0xSifu), a co-founder of the collapsed Canadian crypto exchange QuadrigaCX and a convicted felon. In June 2024, the protocol was exploited twice by the same attacker — first for approximately $19.3 million on June 10 and again for $3.7 million on June 13 — via oracle price manipulation using flash loans, bringing combined losses to approximately $23 million.
Connected Entities
9 entities · 59 linked investigations- ZachXBT→mentioned with→Ethereum(70%)
- Balancer→mentioned with→Ethereum(70%)
- Curve Finance→mentioned with→Ethereum(80%)
- Curve Finance→mentioned with→Aave(70%)
- QuadrigaCX→mentioned with→QuadrigaCX / Gerald Cotten(85%)
- Uniswap→mentioned with→Ethereum(80%)
- UwU Lend→mentioned with→Balancer(60%)
- UwU Lend→mentioned with→ZachXBT(65%)
- UwU Lend→mentioned with→QuadrigaCX(80%)
- UwU Lend→mentioned with→Uniswap(60%)
- + 8 more
Timeline(9 events)
27 January 2022
ZachXBT publicly identifies 0xSifu as Michael Patryn, co-founder of QuadrigaCX; Wonderland community votes to remove him from treasury management role
February 2022
Patryn returns to Wonderland following an informal community vote
September 2022
UwU Lend launches on Ethereum mainnet, forked from Aave V2, founded by Michael Patryn (0xSifu)
10 June 2024
First exploit: Attacker (0x841ddf093f5188989fa1524e7b893de64b421f47) manipulates UwU Lend's sUSDe oracle via Curve Finance spot prices using a ~$3.796 billion flash loan, draining approximately $19.3 million in ETH, crvUSD, bLUSD, and USDC; protocol paused by team
11 June 2024
Michael Patryn (0xSifu) offers the attacker a 20% bounty (approximately $4 million) to return stolen funds; team announces vulnerability patched
13 June 2024
Second exploit: Same attacker uses residual sUSDe collateral from first hack to drain uDAI, uWETH, uLUSD, uFRAX, uCRVUSD, and uUSDT pools for an additional $3.7 million; combined losses reach approximately $23 million
14 June 2024
Protocol reports repayment of approximately $9.7 million in bad debt; attacker does not return funds
15 June 2024
Attacker transfers approximately 1,000 ETH (roughly $3.66 million) to Tornado Cash in initial laundering tranche
9 October 2024
Linked attacker address launders an additional 2,009 ETH through Tornado Cash; total laundered by associated addresses reaches approximately 6,353 ETH
Decision Log
- slot 455369711 · hash FpQABK9HQUfvi3XDrpWTA8uyUNbVnMVohCwWZDn1P2ex
- slot 420912733 · hash 8JkJhRyb95iDM2UnwH9tMrdpG4cwKyjEhKnAgLkhvtdJ
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 19 of 22 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:31 AM
last updated: 10/10/2026, 6:49:33 PM
6 viewsavoid.net — verified advice for a post-truth world