Cryptocurrency

According to <a href="https://financefeeds.com/mynft-simplifies-nfts-collecting-with-physical-vending-machine/" rel="noopener noreferrer nofollow">Thunder Terminal's</a> statement on X (formerly Twitter), the incident affected only 114 out of more than 14,000 wallets on the platform. The company confirmed that funds are secure moving forward and claimed to have halted the attack in under nine minutes. They also plan to refund all lost funds in full and offer affected users 0% fees and $100,000 in credits each.
The attacker, however, disputed Thunder Terminal's claims in an on-chain note, alleging that they possess user data and demanding a ransom of 50 ETH for its deletion. This claim adds a layer of complexity to the incident, raising concerns about the safety of user data.
Thunder Terminal's incident report identified the cause of the exploit as unauthorized withdrawal requests, which were processed due to leaked session tokens. This breach occurred through a MongoDB connection URL, which the attacker exploited to carry out the withdrawals.
<blockquote class="twitter-tweet">
 Incident Report
 At 12:11:47 AM UTC, suspicious withdrawals started getting sent through Thunder wallets.
 A malicious actor got access to a MongoDB connection URL which they used to pull session tokens and execute withdrawals on behalf of users.
 At 12:20:35 AM UTC, the last…
 — Thunder (@ThunderTerminal) <a href="https://twitter.com/ThunderTerminal/status/1739843737860374845?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">December 27, 2023</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> Introduced by Eversify Labs in late 2022, Thunder Terminal is designed for quick transactions across multiple blockchain networks, including Ethereum, Solana, Avalanche, and Arbitrum. It positions itself as an alternative to Telegram trading bots like Unibot.
The incident underscores the ongoing cybersecurity challenges faced by on-chain trading platforms and the importance of robust security measures in the rapidly evolving cryptocurrency sector. Thunder Terminal's prompt response and commitment to refunding affected users highlight the platform's efforts to maintain user trust and security in the wake of the exploit
Cryptocurrency exchanges, frequently&nbsp;<a href="https://financefeeds.com/bitfinex-hacker-and-wife-plead-guilty-of-laundering-nearly-120000-bitcoin/" rel="noopener noreferrer nofollow">targeted by hackers</a>, have witnessed similar incidents in recent months, including hacks on HTX,&nbsp;<a href="https://financefeeds.com/hacking-attack-drains-23-million-from-bitrues-hot-wallets/" rel="noopener noreferrer nofollow">Bitrue</a>, Gdac, and Deribit, resulting in massive losses.

Thunder Terminal hit by $250K exploit; 114 wallets hacked

FinanceFeeds

Other articles published on Dec 27, 2023

Leveraging AI for Effective Marketing: 3 Practical Tips for Success

Binance reintroduces USDC trading pairs after one-year break

3 Tokens Whales Have an Eye On: Solana (SOL), Retik Finance (RETIK), Binance Coin (BNB)

Today’s top cryptocurrency gainers rally double-digits

Ethereum Founder Suggests Proof of Stake Revamp

Binance Launches NFPUSDT Perpetual Contract Amid NFP Price Rally

Join our free newsletter for daily crypto updates!