shield Access Control

How attackers exploited HORS in January 2025 (access control)

On January 2025, HORS suffered a access control — the first of 77 documented access control incidents in our archive where the loss figure was not publicly disclosed but the exploit pattern is documented below.

Attack Mechanics: How the HORS Access Control Played Out

Exploit Class Applied to HORS

The HORS incident on January 8, 2025 is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it. In the full archive, HORS is 1 of 77 documented access control incidents.

HORS in Context

The HORS incident joins a class whose largest loss to date is Corkprotocol (2025) at $12M.

Prior Access Control Before HORS

The nearest access control incident before HORS was Pledge, 36 days earlier on December 3, 2024 ($15K lost). The same exploit class surfaced again within the access control attack surface.

Impact & Recovery for HORS

HORS Loss Figure

The loss figure for HORS is not publicly disclosed. The primary source reports the exploit in non-USD terms, so no USD estimate is published here. For reference, the average loss across 77 access control incidents in our archive is $636K.

Timeline Since the HORS Incident

The HORS exploit occurred 1.3 years ago (461 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for HORS

Public post-mortem / on-chain analysis for the HORS incident: view source.

FAQ

How much did HORS lose?

The HORS loss figure is not publicly disclosed. The primary source reports the exploit in non-USD token terms, so no USD estimate is published here.

When did the HORS hack happen?

The HORS exploit was recorded on January 8, 2025 — 461 days ago.

What type of exploit hit HORS?

The HORS incident is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it.

How common is the Access Control pattern seen at HORS?

Our archive contains 77 documented access control incidents. The HORS incident is one of them.

How does HORS compare to the largest Access Control attack?

The largest access control incident in our archive is Corkprotocol (2025) at $12M. The HORS loss was not publicly disclosed.

What recommendation does the study provide for improving ESG practices in companies?

The study recommends improving information disclosure and providing policy support for sustainable practices.

What is the main focus of the study in the document?

The study focuses on data science advancements in economics, particularly analyzing machine learning and deep learning methods.