USPD Protocol Under Attack: Hacker Mints 98 Million Tokens and Steals 232 stETH
Dec. 5 — The USPD protocol posted on X (formerly Twitter) that it had faced a critical security breach. The attacker exploited the **CPIMP (Contract Pre-Deployment Insecurely Managed Proxy)** method to preemptively seize control of the proxy contract’s administrator permissions during deployment. Disguised as the audited contract version, the attacker lurked for months before launching the attack—minting ~98 million USPD tokens and stealing ~232 stETH.
In a statement, the USPD team clarified the incident did not stem from a smart contract logic flaw. They have reported the relevant attacker addresses to major centralized exchanges (CEXs) to freeze the funds. The team also offered a bounty: if the attacker returns 90% of the stolen assets, they may keep 10% as a reward.
10 minutes ago
Viewpoint: Bitcoin Faces Key Support at $84,400
Dec. 5 — Per analyst @ali_charts, the Cost Basis Heatmap indicates 300,648 Bitcoins are clustered around the $84,400 mark, solidifying it as a key support level.
10 minutes ago
Huobi HTX Update December Merkle Tree Proof: USDC Reserve Nearly Doubles, Core Assets Maintain Over 100% Reserve Ratio
On December 5, Huobi HTX released its latest Proof of Reserves (PoR) data, showing that as of December 1, 2025, the platform’s core assets have continued to see net inflows—with reserves expanding significantly while maintaining full 100%+ coverage across all assets, further strengthening its overall reserve structure.
The latest reserve ratios are as follows: BTC (100%), ETH (101%), TRX (106%), USDT (102%), HTX (100%), XRP (102%), DOGE (100%), SOL (100%), WLFI (101%), and USDC (100%). Specifically, BTC reserves increased by approximately 453 coins, while ETH reserves rose by over 2,000 coins. For stablecoins, USDT user assets grew by more than $416 million, pushing its reserve ratio to 102%; USDC user assets nearly doubled from the previous period, with reserves fully covering 100% of user holdings.
Huobi HTX has publicly disclosed PoR data for 38 consecutive months. Users can access the monthly updated reserve proof reports via the “Assets-Reserve Proof Report” page on the offi
10 minutes ago
XRP, ETH, and BTC currently rank in the top three of Upbit's 24-hour trading volume leaderboard
Update: As of December 5, CoinGecko data shows Upbit’s 24-hour trading volume has declined 25.3% to $11.73 billion.
In the KRW market, the XRP/KRW trading pair leads with a 17.61% share of total volume. Rounding out the top five are ETH, BTC, USDT, and SOL.
10 minutes ago
ZachXBT: UK Hacker Danny Suspectedly Arrested, $18.58 Million in Crypto Assets Seized
On-chain investigator ZachXBT announced in his personal channel on December 5 that British hacker Danny / Meech (also known as Danish Zulfiqar / Khan) was reportedly arrested by law enforcement, and his crypto assets were seized.
Prior to this, ZachXBT had tracked and identified the individual, who is suspected of stealing $243 million in crypto from Genesis creditors in August 2024. Accomplices include Malone, Veer, Chen, and Jeandiel.
Danny also participated in the August 2023 Kroll SIM swap attack, which exposed personal data of creditors for BlockFi, Genesis, and FTX. This sparked targeted social engineering scams that have cost victims over $300 million.
Hours earlier, multiple addresses linked to Danny—tracked by ZachXBT—merged and transferred $18.58 million in crypto to an address beginning with 0xb37d, matching the pattern of past law enforcement asset seizures.
10 minutes ago
Italian Companies and Exchange Commission: Crypto Asset Service Providers Must Obtain MiCAR Authorization by December 30 or Face Shutdown
On December 5, Italy’s securities market regulator Consob issued a notice detailing requirements under the EU’s **Cryptocurrency Market Regulation (MiCAR)** for virtual asset service providers (VASPs) registered with the Italian Ordinary Authority of the Markets (OAM).
### Key Rules for VASPs:
Current OAM-registered VASPs must submit applications by **December 30, 2025** to transition to a regulated **crypto asset service provider (CASP)**—a requirement to continue operating. Failure to comply will bar them from offering related services no later than **June 30, 2026**.
### Investor Guidance:
Consob advised investors to:
- Confirm if their current VASP plans to apply for a CASP license;
- Verify if the provider is listed in the **European Securities and Markets Authority (ESMA)** or OAM registers;
- Request the return of their assets if the provider is unauthorised.
### Urgent Reminder for Unregistered VASPs:
The regulator repeated its call for VASPs without CASP a
10 minutes ago