UwU Lend

Date (as written): 2024-06
Year: 2024
Actors (as written): Lazarus
Actor pages: Lazarus
Tags (as written): FinancialGain Cryptocurrency
Dollar figures (as written): $19.4 million; 19.3 ($ Million)

Source entries (2)

lazarus.day

UwU Lend · 2024-06

Uwulend, a lending protocol, suffered a $19.4 million hack due to an oracle manipulation attack. The attacker used three transactions to exploit a price discrepancy in Uwulend's oracles, facilitated by a flash loan. Despite a recent security audit, the attack revealed vulnerabilities in Uwulend's fallback oracle system.

https://lazarus.day/incidents/uwulend/

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

UwU Lend · 2024-06-10

Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-06-10; Victim: UwU Lend; DPRK APT: TraderTraitor; Amount ($ Million): 19.3. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."

https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub