Skip to main content
Sign in

UwU Lend

avoid.net/uwu-lend→10/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]
anchored·3nK8iP…kZWN

Summary

UwU Lend is an Ethereum-based DeFi lending protocol forked from Aave V2, launched in September 2022 and operated by Michael Patryn (known pseudonymously as 0xSifu), a co-founder of the collapsed Canadian crypto exchange QuadrigaCX and a convicted felon. In June 2024, the protocol was exploited twice by the same attacker — first for approximately $19.3 million on June 10 and again for $3.7 million on June 13 — via oracle price manipulation using flash loans, bringing combined losses to approximately $23 million.

Connected Entities

1 entities
Organizations
□UwU Lend
Relationships
    Have evidence about UwU Lend?

    Timeline(9 events)

    2022-01-27

    ZachXBT publicly identifies 0xSifu as Michael Patryn, co-founder of QuadrigaCX; Wonderland community votes to remove him from treasury management role

    2022-02-01

    Patryn returns to Wonderland following an informal community vote

    2022-09-01

    UwU Lend launches on Ethereum mainnet, forked from Aave V2, founded by Michael Patryn (0xSifu)

    2024-06-10

    First exploit: Attacker (0x841ddf093f5188989fa1524e7b893de64b421f47) manipulates UwU Lend's sUSDe oracle via Curve Finance spot prices using a ~$3.796 billion flash loan, draining approximately $19.3 million in ETH, crvUSD, bLUSD, and USDC; protocol paused by team

    2024-06-11

    Michael Patryn (0xSifu) offers the attacker a 20% bounty (approximately $4 million) to return stolen funds; team announces vulnerability patched

    2024-06-13

    Second exploit: Same attacker uses residual sUSDe collateral from first hack to drain uDAI, uWETH, uLUSD, uFRAX, uCRVUSD, and uUSDT pools for an additional $3.7 million; combined losses reach approximately $23 million

    2024-06-14

    Protocol reports repayment of approximately $9.7 million in bad debt; attacker does not return funds

    2024-06-15

    Attacker transfers approximately 1,000 ETH (roughly $3.66 million) to Tornado Cash in initial laundering tranche

    2024-10-09

    Linked attacker address launders an additional 2,009 ETH through Tornado Cash; total laundered by associated addresses reaches approximately 6,353 ETH

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet-4-5

    generated: 5/4/2026, 2:54:31 AM

    last updated: 5/20/2026, 4:21:59 AM

    avoid.net — verified advice for a post-truth world