LND, a Sonic-based Aave fork, lost $1.18M in May 2025 when a developer with unilateral deployment control introduced a malicious access-control modification that reached production unreviewed. Halborn identified the developer as a DPRK IT worker.