Skip to main content
AVOID.NET

Wise Lending V2

avoid.net/wise-lending-v238/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·cwWm9Q…4VVQ

Summary

Wise Lending V2 is a decentralized lending and yield-farm aggregator protocol deployed on Ethereum and Arbitrum that allows users to supply crypto assets and earn variable yields. The protocol suffered two confirmed exploits: a price manipulation attack in October 2023 that caused approximately $260,000 in losses, followed by a more severe flash loan and share-inflation attack on January 12, 2024 that drained approximately $464,000. The January 2024 attack exploited a precision flaw in the protocol's ERC-4626-style share accounting logic, and a subsequent Code4rena audit in February 2024 identified 5 high-severity and 17 medium-severity vulnerabilities in the codebase.

Connected Entities

7 entities · 60 linked investigations
Relationships
  • ZachXBTmentioned withEthereum(70%)
  • Wise Lending V1mentioned withUniswap(70%)
  • Wise Lending V1mentioned withZachXBT(70%)
  • Wise Lending V1mentioned withArbitrum(60%)
  • Wise Lending V1mentioned withPendle(80%)
  • Wise Lending V1mentioned withEthereum(80%)
  • Uniswapmentioned withEthereum(80%)
  • Pendlementioned withArbitrum(70%)
  • Pendlementioned withEthereum(80%)
  • Wise Lending V2mentioned withWise Lending V1(80%)
  • + 8 more

Connected Through

6 shared actors · 632 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Wise Lending V2?

Timeline(6 events)

13 October 2023

Wise Lending suffers its first confirmed exploit — a price manipulation attack — resulting in approximately $260,000 in losses.

12 January 2024

Wise Lending V2 exploited via flash loan and ERC-4626 share inflation attack. Approximately 177 ETH (~$464,000) drained from the PLP-stETH-Dec2025 pool. Attacker contract: 0x91c49cc7fbfe8f70aceeb075952cd64817f9d82c. Exploit first reported on-chain by researcher Spreek.

21 February 2024

Code4rena competitive audit of Wise Lending V2 begins, covering 44 smart contracts and 6,326 lines of Solidity.

11 March 2024

Code4rena audit concludes. Report identifies 5 HIGH-severity and 17 MEDIUM-severity vulnerabilities.

11 March 2024

Code4rena audit report for Wise Lending V2 published, detailing 22 unique vulnerabilities in the protocol codebase.

28 February 2026

A $66,000 flash loan exploit affecting Wise Lending V2 on both Arbitrum and Ethereum chains is recorded by DeFiLlama's hack tracker. Independent news confirmation was not located at time of investigation.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 12 of 13 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:13 AM

last updated: 8/29/2026, 12:34:15 PM

6 views

avoid.net — verified advice for a post-truth world