HectorNetwork

lazarus.day

Hector Network suffered a smart-contract exploit involving the centralized AddEligibleWallet function, which allowed a designated address to be treated as eligible and interact with funds intended for investor compensation. Linked analysis described the incident as part of a broader pattern of Hector Network security failures and alleged that an audit had identified a possible backdoor that remained exploitable.

tayvano/lazarus-bluenoroff-research

Date:: 2024-01-15; Amount Stolen:: $2,700,000; Tags: Unknown, DPRK IT Workers?. "Attributed in MSMT: The DPRK's Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities"

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-01-16; Victim: Hector Network; DPRK APT: DPRK (Unidentified); Amount ($ Million): 2.789. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."

The article examines the $2.7 million Hector Network redemption exploit

Table 2: DPRK Cryptocurrency Thefts ... Amount ($ Million) ... 2024-01-16 Hector Network DPRK (Unidentified) 2.789