Skip to main content
Sign in

UwU Lend

avoid.net/uwu-lend→10/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3nK8iP…kZWN

Summary

UwU Lend is an Ethereum-based DeFi lending protocol forked from Aave V2, launched in September 2022 and operated by Michael Patryn (known pseudonymously as 0xSifu), a co-founder of the collapsed Canadian crypto exchange QuadrigaCX and a convicted felon. In June 2024, the protocol was exploited twice by the same attacker — first for approximately $19.3 million on June 10 and again for $3.7 million on June 13 — via oracle price manipulation using flash loans, bringing combined losses to approximately $23 million.

Connected Entities

1 entities
Organizations
□UwU Lend
Relationships
    Have evidence about UwU Lend?

    Timeline(9 events)

    27 January 2022

    ZachXBT publicly identifies 0xSifu as Michael Patryn, co-founder of QuadrigaCX; Wonderland community votes to remove him from treasury management role

    February 2022

    Patryn returns to Wonderland following an informal community vote

    September 2022

    UwU Lend launches on Ethereum mainnet, forked from Aave V2, founded by Michael Patryn (0xSifu)

    10 June 2024

    First exploit: Attacker (0x841ddf093f5188989fa1524e7b893de64b421f47) manipulates UwU Lend's sUSDe oracle via Curve Finance spot prices using a ~$3.796 billion flash loan, draining approximately $19.3 million in ETH, crvUSD, bLUSD, and USDC; protocol paused by team

    11 June 2024

    Michael Patryn (0xSifu) offers the attacker a 20% bounty (approximately $4 million) to return stolen funds; team announces vulnerability patched

    13 June 2024

    Second exploit: Same attacker uses residual sUSDe collateral from first hack to drain uDAI, uWETH, uLUSD, uFRAX, uCRVUSD, and uUSDT pools for an additional $3.7 million; combined losses reach approximately $23 million

    14 June 2024

    Protocol reports repayment of approximately $9.7 million in bad debt; attacker does not return funds

    15 June 2024

    Attacker transfers approximately 1,000 ETH (roughly $3.66 million) to Tornado Cash in initial laundering tranche

    9 October 2024

    Linked attacker address launders an additional 2,009 ETH through Tornado Cash; total laundered by associated addresses reaches approximately 6,353 ETH

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain18 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 18 of 22 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-5

    generated: 5/4/2026, 2:54:31 AM

    last updated: 8/30/2026, 5:14:07 AM

    avoid.net — verified advice for a post-truth world