UwU Lend offers a $5 million bounty to whoever catches its exploiter

After the UwU Lend exploiter failed to return funds, the protocol is taking another initiative to catch the culprit.

UwU Lend has established a bounty worth $5 million in ETH for "the first person to identify and locate" the exploiter, according to an Input Data Message (IDM) on Ethereum, adding, "No recovery of funds or charges required."

Previously, the protocol had discussed establishing a bounty directly with the exploiter. The attacker could keep 20% of what they took as long as they returned 80%. If the exploiter complied, the protocol stated it would not pursue the matter further and not involve law enforcement regarding the incident.

The exploiter had until 1 p.m. ET (17:00 UTC) Wednesday to return the funds. But in a Thursday message to the exploiter, the protocol wrote that the "repayment deadline for the funds you stole has passed."

The exploits

The exploiter first attacked UwU Lend on Monday through a flash loans compromise that resulted in the loss of $20 million. On Thursday, the protocol lost another $3.7 million . Security experts believe the same culprit enacted both attacks, The Block previously reported.

UwU Lend is a decentralized liquidity market protocol allowing users to deposit, borrow or stake assets.

The Block reached out to UwU Lend for comment on the bounty.