Leaderboard
612All-time rank
LND
May 9, 2025
$1.2M
Lost
$1.2M
Recovered
$0
Net loss
$1.2M
Unrecovered0% recovered
18M in May 2025 when a developer with unilateral deployment control introduced a malicious access-control modification that reached production unreviewed. Halborn identified the developer as a DPRK IT worker.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
SonicHyperliquid L1
Event timeline
- May 9, 2025Exploit executed — $1.2M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%