Sifu’s UwU Lend reportedly hacked for $20M, Curve’s Egorov among affected
UwU Lend, created by notorious fraudster Michael Patryn (a.k.a. 0xSifu) has been hacked for almost $20 million, according to an alert by blockchain security firm Cyvers. An initial post on X (formerly Twitter) drew attention to $14 million worth of losses before Cyvers identified further losses, totaling $19.5 million worth of crypto assets. The attack transactions show the use of ‘flash loans’ which can be used to manipulate asset prices on decentralized finance (DeFi) apps. Audit firm Peckshield noted that, in this case, five stablecoin pairs were targeted in order to influence the sUSDe price feed, or ‘oracle.’ UwU Lend is a ‘fork’ of DeFi’s premier lending protocol Aave, specifically its v2 codebase. In November, Aave alerted the community to a bug found in the v2 code which was later remediated by disabling stable borrow rates. The protocol was paused shortly after the attack, according to the official UwU Lend X account. ALERTHey @UwU_Lend, you are being attacked! So far ...
