Wise Lending V2
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 52. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -9.6 |
| Problems around it, caused by others | -0.8 |
| Long-running | +4 |
| Sum | 52 |
Score: 52/100 (kept between 0 and 100)
How scoring works →Summary
Wise Lending V2 is a decentralized lending and yield-farm aggregator protocol deployed on Ethereum and Arbitrum that allows users to supply crypto assets and earn variable yields. The protocol suffered two confirmed exploits: a price manipulation attack in October 2023 that caused approximately $260,000 in losses, followed by a more severe flash loan and share-inflation attack on January 12, 2024 that drained approximately $464,000. The January 2024 attack exploited a precision flaw in the protocol's ERC-4626-style share accounting logic, and a subsequent Code4rena audit in February 2024 identified 5 high-severity and 17 medium-severity vulnerabilities in the codebase.
Connected Entities
7 entities · 60 linked investigations- ZachXBT→mentioned with→Ethereum(70%)
- Wise Lending V1→mentioned with→Uniswap(70%)
- Wise Lending V1→mentioned with→ZachXBT(70%)
- Wise Lending V1→mentioned with→Arbitrum(60%)
- Wise Lending V1→mentioned with→Pendle(80%)
- Wise Lending V1→mentioned with→Ethereum(80%)
- Uniswap→mentioned with→Ethereum(80%)
- Pendle→mentioned with→Arbitrum(70%)
- Pendle→mentioned with→Ethereum(80%)
- Wise Lending V2→mentioned with→Wise Lending V1(80%)
- + 8 more
Timeline(6 events)
13 October 2023
Wise Lending suffers its first confirmed exploit — a price manipulation attack — resulting in approximately $260,000 in losses.
12 January 2024
Wise Lending V2 exploited via flash loan and ERC-4626 share inflation attack. Approximately 177 ETH (~$464,000) drained from the PLP-stETH-Dec2025 pool. Attacker contract: 0x91c49cc7fbfe8f70aceeb075952cd64817f9d82c. Exploit first reported on-chain by researcher Spreek.
21 February 2024
Code4rena competitive audit of Wise Lending V2 begins, covering 44 smart contracts and 6,326 lines of Solidity.
11 March 2024
Code4rena audit concludes. Report identifies 5 HIGH-severity and 17 MEDIUM-severity vulnerabilities.
11 March 2024
Code4rena audit report for Wise Lending V2 published, detailing 22 unique vulnerabilities in the protocol codebase.
28 February 2026
A $66,000 flash loan exploit affecting Wise Lending V2 on both Arbitrum and Ethereum chains is recorded by DeFiLlama's hack tracker. Independent news confirmation was not located at time of investigation.
Decision Log
- slot 455365994 · hash DJZZSpD6xwkWj8SNcKw1aPmNmXLZWfjPVk7ibXqfg7yQ
- slot 422969568 · hash XjLtCCFQqFp6uhudZfWGLzRA7pr96222qayE9TaMoZZ
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 12 of 13 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:13 AM
last updated: 10/10/2026, 6:46:16 PM
12 viewsavoid.net — verified advice for a post-truth world