Ethereum

Solana

Security

Source: DALL·E 
Thunder Terminal has recently encountered an exploit. Despite the severity of the incident, the platform has assured users of the security of their funds. Yet the hacker claimed differently and demanded ransom. 
In a <a href="https://twitter.com/ThunderTerminal/status/1739813779976982946?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1739813779976982946%7Ctwgr%5Ec7faff461cf97c96b0f2eafc1a28a65f9530a6b4%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcointelegraph.com%2Fnews%2Fthunder-terminal-hack-exploit-wallet-compromise-hacker-demands-ransom">recent post</a> published by the <a href="https://cryptonews.com/news/breaking-ledger-removes-bug-allowing-popular-decentralized-applications-to-be-compromised-heres-the-latest.htm">decentralized</a> platform Thunder Terminal, the company has faced an external exploit of $192,000, resulted in unauthorized access to 114 out of over 14,000 wallets on its network. 
Thunder Terminal said when they detected the breach, “Seems like a 3rd-party service we were using was compromised.” Later they claimed that the exploit was rapidly contained, having been halted within nine minutes of detection. 
Seems like a 3rd-party service we were using was compromised. 
Investigating actively – please give us some time. 
Funds are safe and refunds will be handled shortly. 
— Thunder (@ThunderTerminal) <a href="https://twitter.com/ThunderTerminal/status/1739812671174951415?ref_src=twsrc%5Etfw">December 27, 2023</a> 
<h2 id="exploit-refund-resolution">Exploit, Refund, Resolution</h2> 
 “At 12:11:47 AM UTC, suspicious withdrawals started getting sent through Thunder wallets. A malicious actor got access to a MongoDB connection URL which they used to pull session <a href="https://cryptonews.com/news/best-crypto-to-buy-today-december-25-2023-ordi-sui-aptos.htm">tokens</a> and execute withdrawals on behalf of users,” Thunder Terminal wrote in a <a href="https://twitter.com/ThunderTerminal/status/1739843737860374845">following post</a>. 
“No private keys nor wallets were compromised. The exploit happened through withdrawal requests our server considered as authorized because of leaked session tokens,” wrote the post. 
The platform further explained the mechanism and how the wallets were protected, saying, “We do not store any private keys, so the attacker does not have access to any wallets. Desktop wallets were not affected.” 
As a result of the incident, around 86 <a href="https://cryptonews.com/news/best-ethereum-casinos.htm">Ethereum</a> (ETH) and 439 <a href="https://cryptonews.com/news/solana-struggles-with-saga-phones-inventory-amid-excessive-demand.htm">Solana</a> (SOL) tokens were lost. 
Thunder Terminal promised that “all funds lost will be refunded in full” and “affected users will be given 0% fees and $100k in credits each,” as the team moved on to necessary procedures. 
According to the post, the company has contacted the <a href="https://cryptonews.com/news/tether-ceo-details-partnership-with-fbi-and-secret-service-in-letter-to-legislators.htm">Federal Bureau of Investigation</a> (FBI), planned to add two-factor authentication for withdrawals, and been undergoing a comprehensive technical audit. 
“Access to the platform will be restored as soon as possible,” said Thunder Terminal. 
<h2 id="hacker-counters-thunder-terminal-and-demands-ransom">Hacker Counters Thunder Terminal and Demands Ransom</h2> 
 However, the hacker claimed differently, countering the platform’s security statement. “All lies,” said the exploiter. “Also we have all the user data. 50 ETH and we will delete the data.” 
Some users have expressed their concerns, replying to Thunder Terminal’s post and questioning that “how did the 114 wallets get compromised if their private keys were safe?” Another replied, “Funds are safe in someone else’s wallet.” 
In the meantime, the platform said, “We are willing to negotiate with the exploiter if they return user funds. Otherwise, we intend to pursue this crime to the fullest extent of the US judicial system.”

Thunder Terminal Claims Security After $192,000 Exploit, Hacker Demands Ransom in Dispute

Table of Contents

Cryptonews.com

Other articles published on Dec 27, 2023

Telcoin Swiftly Secures Users After $1.2M Polygon Wallet Hack; Full Restoration Promised

MicroStrategy’s BTC investment yields over 300% investor gain in 2023

Solana Investors Should Be Prepared For SOL To Fall to This Price – Analyst

Changpeng Zhao Tops List Of Crypto Billionaires Despite $4.3B Fine

SIDUS Bank 2.0 Launch!

ElliQ: AI Companion for Loneliness Alleviation Among Seniors

Join our free newsletter for daily crypto updates!