Read

<div class="cryptonews">
 <p class="is-style-lead">Multi-chain trading platform Thunder Terminal has suffered a hacker attack, saying a malicious actor gained access to a MongoDB connection.</p>
 <p>In an X post on Dec. 27, Thunder Terminal acknowledged the breach, stating that the hacker gained access to a MongoDB connection URL.</p>
 <p>This access allowed the intruder to retrieve session tokens and execute withdrawals on behalf of users.</p>
 <p>The <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> concluded at 12:20 AM UTC, Dec 27, after all session tokens and transaction signing access were revoked for security reasons, Thunder Terminal said.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Incident Report<br><br>At 12:11:47 AM UTC, suspicious withdrawals started getting sent through Thunder wallets. <br><br>A malicious actor got access to a MongoDB connection URL which they used to pull session tokens and execute withdrawals on behalf of users.<br><br>At 12:20:35 AM UTC, the last…</p>— Thunder (@ThunderTerminal) December 27, 2023
   </blockquote>
  </div>
 </figure>
 <p>While Thunder Terminal assured users that no private keys or wallets were compromised, the team admitted that “less than 1% of wallets” were affected. The attack reportedly resulted in funds being stolen from at least 114 wallets.</p>
 <blockquote class="wp-block-quote">
  <p>“The exploit happened through withdrawal requests our server considered as authorized because of leaked session tokens. We do not store any private keys, so the attacker does not have access to any wallets. Desktop wallets were not affected.”</p>
  <p>Thunder Terminal</p>
 </blockquote>
 <p>As of press time, it is unclear, how exactly the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> got access to the project’s database. Thunder Terminal suggests that the hack may be related to an incident involving New York-based MongoDB. In mid-December, MongoDB detected “suspicious activity” on its network, later confirming that <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a>s had infiltrated its systems “for some period of time before discovery.”</p>
 <p>According to blockchain sleuth ZachXBT, the <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> transferred 86.5 ETH (worth around $192,500) to Railgun, a privacy-aimed protocol that enables users to anonymously swap cryptocurrencies and make private transactions. The project also revealed that the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> stole over 439 SOL (around $49,160).</p>
 <p>Initially, Thunder Terminal said the attack was related to a compromise of its third-party provider. The team also said “funds are safe,” adding that “refunds will be handled shortly.”</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Seems like a 3rd-party service we were using was compromised.<br><br>Investigating actively – please give us some time. <br><br>Funds are safe and refunds will be handled shortly.</p>— Thunder (@ThunderTerminal) December 27, 2023
   </blockquote>
  </div>
 </figure>
 <p>However, shortly after this post, the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> issued a blockchain-based statement, accusing the Thunder Team of lying and threatening to disclose all user data unless the project pays them 50 ETH in ransom.</p>
 <p>Launched in late 2022, Thunder Terminal is a multi-chain trading platform with support for Ethereum, Solana, Avalanche, and other networks.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Major crypto hacks of 2023: how industry lost over $1b within minutes
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/thunder-terminal-suffers-hacker-attack-losses-amount-to-240k-tbt74853.html">https://thebittimes.com/thunder-terminal-suffers-hacker-attack-losses-amount-to-240k-tbt74853.html</a></p>

Thunder Terminal suffers hacker attack, losses amount to $240k

TheBitTimes

Other articles published on Dec 27, 2023

Bitcoin’s Price Shows Familiar Pre-Bull Market Pattern from 2015-2017: Should You Buy BTC?

Ether Poised to Outshine Bitcoin in 2024, ETC Group Report Predicts

Ripple (XRP) Price Projection: $22 ATH in Next Bull Market; Analyst Bets Heavily on Meme Coin Reb...

Crypto Prices Today: Bitcoin, Pepe Coin Plummet As MINA Rises

XRP Price Forecast for January 2024: Will It Fly Above $0.9000?

Mark Cuban Reportedly Unstaked And Moved MATIC Holdings To Coinbase

Join our free newsletter for daily crypto updates!