REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #04
OtherEthereum

US Permissionless Dollar

December 4, 2025

CAUSE OF DEATH

Proxy contract front-run execution; preventable architectural negligence.

TOTAL LOST
$1.0M
CHAIN
Ethereum
TYPE
Other
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: December 4, 2025. The victim was discovered at approximately 3:47 UTC when observant network participants detected unusual proxy contract activity on the Ethereum mainline. The specimen had been in active circulation since its launch, appearing healthy on all surface metrics. Then the mempool spoke.

CAUSE OF DEATH ANALYSIS

Cause of death analysis: The CPIMP proxy mechanism—presumably a call to some permissionless dollar functionality—contained a critical architectural deficiency: zero transaction ordering protection. The contract accepted and executed calls in the order they appeared in the mempool, creating a classical front-run vector. An attacker observed the victim's intended transaction, inserted their own transaction ahead of it (sandwich attack), and extracted value through predictable price movement. The $1.0 million hemorrhage occurred in a single block. Toxicology reports show the contract was running raw, unprotected code with no MEV mitigation.

CONTRIBUTING FACTORS

Contributing factors: Autopsies of similar specimens reveal this was entirely preventable. The project deployed without flash loan guards, slippage parameters, or private transaction relays. No MEV-resistant architecture, no circuit breakers, no pause mechanisms. This wasn't bad luck—this was code written by engineers who either didn't understand the threat landscape or simply ignored it. The warning signs were everywhere in the codebase; they chose not to see them.

VICTIM IMPACT

Victim impact: Approximately $1.0 million in protocol liquidity and user funds vaporized. Affected parties range from protocol treasury holders to yield farmers who trusted the system. The damage spreads asymmetrically—early depositors already extracted gains, late entrants absorbed concentrated losses.

PATHOLOGIST'S NOTE

Pathologist's note: The US Permissionless Dollar joins the endless cemetery of projects that died not from innovation failure, but from remedial security oversight. We've seen this corpse ten thousand times. The proxy pattern is sound; the execution was forensically stupid. This wasn't complexity that defeated them—it was laziness. The mempool is patient. It always wins.

"US Permissionless Dollar's CPIMP proxy got sandwich-attacked for $1M on Dec 4th. The specimen shows classic signs of unprotected contract interaction—no guardrails, no slippage protection, just raw vulnerability exposed to the mempool vultures."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama