Wise Lending V1 Hack

Wise Lending protocol was exploited on Ethereum Mainnet, losing 178.19 ETH.

Wise Lending is a decentralized lending and borrowing protocol. On January 12, 2024, the protocol was exploited on the Ethereum Mainnet due to a smart contract vulnerability, which resulted in a loss of over 178.19 ETH worth approximately $449,413 USD. The root cause of the exploit is due to the precision loss in smart contract operations.

The exploiter took advantage of a nearly empty PLP-stETH-Dec2025 market in the protocol, which was deployed just a day prior to the attack incident, in order to inflate the share price. The attacker was funded by Tornado Cash and the stolen funds were transferred to another EOA.

Attacker Address:

https://etherscan.io/address/0xB90CF1d7…2B45Dc

Funds Holder as of Jan 16, 2024:

https://etherscan.io/address/0x592856d6…C52530

Malicious Transaction:

https://etherscan.io/tx/0x04e16a79…d8bc31

Malicious Contract Address:

https://etherscan.io/address/0x91c49Cc7…f9d82c