UwU Lend
A $20M loss on Ethereum in 2024, caused by an oracle manipulation flaw. Here's what happened, the vulnerability class behind it, and where it stands in ProveWall's re-proof pipeline.
$20Mreported loss
2024year
Ethereumchain
Oracle manipulationvulnerability class
Mechanism — flash-loan Curve sUSDE oracle manip
✔ Re-proven on a forked chain
We re-executed this exploit against the incident state on a forked chain and it moved value — the vulnerability reproduces. We have not separately re-tested the project's post-mortem patch against it, so this page claims the reproduction only.What this class of bug is
Oracle-manipulation attacks corrupt the price or data feed a contract trusts, so downstream logic executes on false inputs and mis-prices collateral or debt.
How to read this page. The dollar figure is the publicly reported loss attributed to this
incident. A ProveWall re-proof reproduces the vulnerability class/mechanism by execution on a forked chain,
with a signed receipt — we say so explicitly only once that execution has passed.
Other oracle manipulation exploits
Same vulnerability class, re-proven or queued on the wall: BonqDAO · Mango Markets · Truebit oracle · Inverse Finance
Want your own contract actually proven — not guessed?
Static tools and LLM auditors ask "is there a check here?" and miss the check that exists but is wrong. OmniGuard Labs runs the exploit on a forked chain and sends you a signed pass/fail receipt. Request a proof-backed audit →