REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #10
Flash LoanEthereum

UwU Lend

June 10, 2024

CAUSE OF DEATH

Price oracle manipulation via flash loan atomicity exploitation.

TOTAL LOST
$20.0M
CHAIN
Ethereum
TYPE
Flash Loan
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: June 10, 2024, Ethereum mainnet. The specimen arrived at our facility exhibiting classic signs of acute financial trauma consistent with a flash loan attack. Death occurred within a single transaction block—a mercy, in some respects. The victim never saw it coming because, technically, it was over before the next block was mined.

CAUSE OF DEATH ANALYSIS

Cause of death analysis: The attacker executed a textbook price oracle attack using flash loan mechanics. They borrowed substantial liquidity from a flash loan provider, used those funds to manipulate on-chain price feeds in that same transaction, then weaponized the distorted prices to trigger liquidations of collateral at rates no sane market would accept. The protocol's price oracle—one of those decentralized oracles everyone pretends are sufficiently robust—consumed poisoned data without hesitation. Liquidations cascaded. Collateral was seized at 40-60 cents on the dollar. By the time the transaction settled, $20 million in user funds had evaporated like morning dew on the blockchain.

CONTRIBUTING FACTORS

Contributing factors: The autopsy reveals multiple pre-existing conditions that accelerated mortality. First, the protocol relied on price feeds that could be manipulated within a single block's timeframe—a critical architectural vulnerability that screams "I didn't read about MEV." Second, there were no circuit breakers, no price deviation checks, no sanity bounds preventing liquidations at obviously fraudulent rates. The victim was essentially a patient with no immune system being treated by a doctor reading a forged chart. Warning signs existed but went unheeded: similar attacks had claimed victims across DeFi repeatedly since 2020. This wasn't a novel exploit; it was a cover version of a song that had already gone platinum in the rekt charts.

VICTIM IMPACT

Victim impact: Approximately $20 million in user funds permanently departed. We're cataloging the casualties now—liquidity providers, yield farmers, and the inevitable retail investors who believed the "safe" narrative. Depositors lost access to their collateral. The protocol's token entered a death spiral that economics textbooks will probably use as a case study in another five years.

PATHOLOGIST'S NOTE

Pathologist's note: The specimen demonstrates the fundamental pathology afflicting modern DeFi: the belief that decentralization solves security when it actually just distributes the attack surface. Flash loans aren't inherently lethal—they're financial defibrillators in the right hands. But give them to a protocol with weak pulse sensing and you've basically handed a loaded weapon to someone who doesn't understand which end is dangerous. UwU Lend joins thousands of its predecessors in the Great Rekt Archive of Ethereum. We've stopped counting the bodies. Some might call this natural selection. We just call it Tuesday.

"UwU Lend flatlined after attackers borrowed massive liquidity, manipulated price feeds in a single transaction, and liquidated collateral at fraudulent rates. Twenty million reasons why your oracle shouldn't trust the same block it's reading from."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama