Skip to content
Est. MMXXVIVol. VI · № 273RSS
Blockchain Breaches

An archive of cryptocurrency security incidents — hacks, exploits, bridge failures and rug pulls, documented with on-chain evidence.

Dossier № 255Smart Contract Bug

USPD Stablecoin Mint Bug

USPD, a newer decentralized stablecoin, lost ~$1M via a mint/collateral flaw that allowed minting against insufficient backing, briefly depegging the token.

Date
Victim
USPD
Chain(s)
Status
Partially Recovered

In December 2025, the decentralized stablecoin USPD lost approximately $1 million through a mint/collateral-validation flaw that allowed minting against insufficient backing. USPD briefly depegged before the contract was paused.

What happened

USPD's mint path did not fully enforce collateral backing under a specific interaction, letting an attacker mint unbacked USPD and extract value. The peg wobbled until minting was paused and the issue patched.

Aftermath

  • Paused, patched; partial recovery; peg restored.

Why it matters

USPD is a late-2025 member of the stablecoin mint-validation family (Cashio, SafeDollar, Raft, Resolv). The catalogue's stablecoin thesis holds again: the entire product is the credibility of the peg, so any demonstrated path to unbacked supply is an existential event regardless of dollar size. USPD survived because it caught and patched fast and the breach was small — but the recurrence of this exact failure class, year after year, across every stablecoin design (algorithmic, collateralized, delta-neutral), is one of the catalogue's most stubborn patterns.

Sources & on-chain evidence

  1. [01]halborn.comhttps://www.halborn.com/blog/post/explained-the-uspd-incident-december-2025
  2. [02]rekt.newshttps://rekt.news/uspd-rekt

Related filings