According to USPD’s official statement, a Dec. 4 CPIMP attack affected 230 users; compensation via Claim Tokens precedes the Q2 2026 release of a modular, privacy-enhanced V2.
USPD confirmed that its V1 protocol was targeted by a CPIMP deployment attack on Dec. 4, 2025, unrelated to smart contract vulnerabilities. In an official statement, the team announced that about 230 affected users will receive redeemable Claim Tokens at a 1:1 ratio in January 2026, supported by a dedicated compensation pool. The upgraded USPD V2 is scheduled for release in Q2 2026, featuring a modular design and Railgun privacy integration.