The USPD protocol suffered a sophisticated attack that resulted in the loss of approximately 232 stETH, with the attackers minting 98 million USPD tokens.

Odaily Planet Daily reports that the USPD protocol officially issued an emergency security alert today, confirming that its protocol suffered a serious security vulnerability attack, resulting in unauthorized token minting and liquidity depletion. Attackers used an advanced attack technique called "CPIMP" to preemptively execute proxy initialization during deployment on September 16th, gaining hidden administrator privileges. By installing a "shadow" and manipulating event data, the attackers successfully circumvented verification tools, including Etherscan, and after remaining hidden for several months, today used their privileges to mint approximately 98 million USPD tokens and steal approximately 232 stETH. The USPD team has cooperated with law enforcement and security organizations, flagging the attacker's addresses to freeze funds, and has offered to treat the incident as a white-hat rescue, promising to cease law enforcement action if 90% of the funds are returned.