UwU Lend Review 2026: Lending Market After 2024 Exploits

UwU Lend is a decentralized lending market on Ethereum. Users deposit assets to earn interest, and borrowers pay interest to take loans. It launched in 2022 and has its own token, UWU.

The project is best known for the exploit on 10 June 2024. A smart contract vulnerability was used across three transactions on Ethereum Mainnet, and early reports put the loss at about $19.3 million. A few days later, on 13 June, the same attacker reportedly took another $3.7 million.

After these events the protocol holds only a small amount of value, under $100,000 in total deposits. The UWU token trades at a fraction of a cent with very little volume. The project's website could not be reached, and no audits are listed.

UwU Lend is a pooled money market. Depositors supply tokens to a shared smart contract pool and receive a claim on their deposit plus interest. Borrowers take tokens out of the pool and pay interest, which is how depositors are paid.

Borrowers normally must lock collateral worth more than the loan. If the collateral's value falls too far, the position can be liquidated to repay the debt. Interest rates adjust automatically, rising when more of the pool is borrowed and falling when it is not.

This design depends entirely on the smart contract code and its price and accounting logic. A flaw can let an attacker withdraw far more than they should, which is what the June 2024 exploit involved.

UwU Lend does not publish a fee schedule that we could confirm. As in most lending markets, the main cost to a borrower is the variable interest rate, and depositors earn a share of that interest. Both rates move with how much of the pool is borrowed.

Every action on Ethereum also costs network gas, which varies with congestion. Any protocol or reserve fees would be shown in the app or its documentation, which could not be reviewed here.

Security is the central issue. The protocol lost about $19–20 million in a single exploit on 10 June 2024 because of a smart contract vulnerability, and was reportedly hit again for $3.7 million on 13 June by the same attacker. No audits are listed for the project.

Lending protocols hold user funds in smart contracts, so depositors carry full contract risk and no insurance or guarantee is documented. Whether affected users were compensated is not established, and the project does not clearly publish a recovery plan. Regulatory status and team details are not published either. Treat any use as high risk and never deposit more than you can lose.

UwU Lend suits only researchers and experienced DeFi users who want to study how a lending-protocol exploit happened or who accept very high risk. It is not suitable for newcomers or for anyone who needs reliable access to their funds.