Railgun

Security

<p>In a recent incident, Thunder Terminal, the on-chain trading platform, successfully thwarted an exploit that compromised 114 wallets, resulting in losses of $240,000. The attacker, however, has disputed Thunder’s claims of user data safety, demanding a ransom for the purportedly affected information.&nbsp;</p>
<h2 class="wp-block-heading" id="the-exploit-and-losses">The exploit and losses</h2>
<p>On December 27, Thunder Terminal issued an incident report revealing that it had suffered an exploit leading to the compromise of 114 user wallets. The attacker managed to execute unauthorized withdrawals, resulting in a total loss of 86.5 Ether and 439 <a href="https://www.cryptopolitan.com/solana-new-role-as-ethereum-layer-2-explored/" rel="noopener noreferrer nofollow">Solana</a>, equivalent to $240,000, all within just nine minutes.</p>
<p>According to Thunder’s incident <a href="https://twitter.com/ThunderTerminal/status/1739813779976982946" rel="noopener noreferrer nofollow" target="_blank">report</a>, the breach occurred due to an attacker gaining access to a “MongoDB connection URL,” which subsequently allowed them to initiate these unauthorized transactions. The breach itself was linked to an exploitation of MongoDB that transpired eight days before the incident.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">No one's private keys are compromised.<br><br>Only 114 wallets out of over 14,000 were affected.<br><br>Funds are safe going forward. We stopped the attack in &lt;9 minutes. <a href="https://t.co/BPzeAg4cz8" rel="noopener noreferrer nofollow" target="_blank">https://t.co/BPzeAg4cz8</a></p>— Thunder (@ThunderTerminal) <a href="https://twitter.com/ThunderTerminal/status/1739813779976982946?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">December 27, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<h2 class="wp-block-heading" id="thunder-terminal-s-response">Thunder Terminal’s response</h2>
<p>Despite the breach, Thunder Terminal sought to reassure its users, emphasizing that no private keys or wallets had been compromised. The platform pledged to fully refund all affected users, providing them with 0% fees and $100,000 in platform credits as a goodwill gesture.</p>
<p>Thunder also stressed that the exploit affected only a small fraction of its user base, specifically 114 out of 14,000 wallets. The company affirmed its commitment to security and announced its intention to take extra precautions to safeguard user funds in the future.</p>
<h2 class="wp-block-heading" id="hacker-s-ultimatum-and-counterclaims">Hacker’s ultimatum and counterclaims</h2>
<p>However, tensions escalated as the attacker contradicted Thunder’s assurances. In a message on Etherscan, the hacker declared that Thunder’s statements were “all lies” and demanded a ransom of 50 ETH, equivalent to $110,000, for the allegedly compromised user data. The message conveyed that the attacker possessed all the user data and would delete it upon receiving the ransom.</p>
<p>While not directly addressing the hacker’s request in its official response, Thunder Terminal reaffirmed that it could not access users’ private keys. This statement implied that there should be no way for the attacker to access such sensitive information.</p>
<h2 class="wp-block-heading" id="security-measures-and-negotiations">Security measures and negotiations</h2>
<p>Thunder Terminal is taking proactive steps to enhance its security infrastructure in light of the incident. The platform has expressed willingness to negotiate with the hacker to facilitate the return of the stolen funds, demonstrating its commitment to resolving the situation amicably.</p>
<p>Etherscan data indicates that the hacker has initiated transfers of the stolen assets, with 86.3 ETH being sent to the Railgun protocol, a service known for anonymizing transactions on the blockchain.</p>
<p>Thunder Terminal, launched by Eversify Labs in late 2022, is a trading platform tailored for swift transactions across various blockchain networks, including Ethereum, Solana, Avalanche, and Arbitrum. Positioned as a competitor to popular Telegram trading bots like Unibot, Thunder Terminal entered the market amid a surge in demand for meme coins in the latter part of the year.</p>
<p><span id="docs-internal-guid-1d0e3d62-7fff-34be-b268-4277e04ce51f"></span></p>
<div><span style="font-size: 11pt;font-family: Arial, sans-serif;background-color: transparent;vertical-align: baseline"></span>
</div>

Thunder Terminal thwarts $240,000 hack attempt, assures user funds are safe

Table of Contents

Cryptopolitan_News

Other articles published on Dec 27, 2023

South Korean Biz Exec Bailed as ‘Bithumb Market Manipulation’ Probe Continues

Weekly Cryptocurrency Analysis: Altcoins Face Further Rallies As An Extension Of The Uptrend

Grayscale Submits Amended Spot Bitcoin ETF Application: What are the Changes?

Shiba Inu Team to Automate SHIB Burns Amid Community Concerns

Ethereum Rainbow chart predicts ETH price for Jan 1, 2024

What’s in Store For Worldcoin (WLD) After a Controversial 2023?

Join our free newsletter for daily crypto updates!