06:24
Stablecoin protocol USPD suffers "CPIMP" attack, with losses of approximately $1 million
PANews, December 5—According to PeckShieldAlert, the stablecoin project USPD has suffered a major security breach, resulting in a loss of approximately $1 million. USPD's official team confirmed that the protocol was exploited, with the attacker minting tokens without authorization and draining liquidity. The team has urgently warned users to immediately revoke all token approvals for the USPD contract.
The USPD protocol has confirmed it was hit by a "CPIMP" attack. During the deployment phase, the attacker front-ran the initialization of the proxy via Multicall3, seized admin privileges, and disguised themselves as an audited implementation contract. The team stated that the issue was not a contract logic bug; the attacker concealed their access for several months before upgrading the proxy, minting about 98M USPD, and transferring around 232
STETH0.29%
- 1
