Digital Asset
Intelligence
Security Incident

UwU Lend Contract Vulnerability: $19.30M Reported Loss

·Historical incident record

Incident Overview

On June 10, 2024, according to the security monitoring system MistEye by SlowMist, the digital asset lending platform UwU Lend on the EVM chain was attacked, resulting in a loss of approximately $19.3 million. The attacker manipulated the price oracle by making large exchanges in the CurveFinance pool, affecting the price of the sUSDE token, and used the manipulated price to arbitrage other assets from the pool.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/1800181916857155761 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    UwU Lend

    Attack methodContract Vulnerability
    Reported loss$ 3,720,000
  2. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 34,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 1,500,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000