CertiK Alert|12月 05, 2025 11:07
#CertiKInsight 🚨
USPD contract was exploited for ~$1M by triggering manipulated storage data over 2 months ago.
The first txn on Sep 16th front-ran the legitimate initialization and added a malicious middle proxy to the USPD Stabilizer.
https://etherscan.io/tx/0xc0b7e490caac2b8cfa5e62d1b28a5e7dba7600e623c71352acbc9b23c2b65b7c/advanced
The second txn on Sep 17th calls upon the malicious proxy to grant a privileged role to the attacker's contract, which is used 78 days later.
https://etherscan.io/tx/0xf9a493f061fbf17fe2cf7c26d6b03d85c6b43026500e61728933c2e218581079
https://x.com/USPD_io/status/1996711283446464598(CertiK Alert)
Share To
HotFlash
APP
X
Telegram
CopyLink