USPD suffered a $1M exploit after an attacker seized its proxy admin rights during deployment, enabling the minting of 98M USPD and draining 232 stETH. The team warns users to avoid the token and revoke approvals.