Switch

Security

<div class="insidebitcoins">
 Thunder Terminal, a popular on-chain trading platform, has suffered a hacking attack that resulted in 114 wallets being compromised.
 The attacker managed to transfer 86.5 ETH ($192,000) during the incident, sending the funds to Railgun, according to an online investigator, ZachXBT.
 <h2 id="114-wallets-compromised-86-5-eth-and-439-sol-stolen">114 Wallets Compromised, 86.5 ETH And 439 SOL Stolen</h2>
 During its announcement of the incident, Thunder Terminal admitted that 114 wallets were affected by the security incident. However, it also insisted that the funds are safe.
 The platform said in a post on X that no private keys were compromised before or during the exploit that occurred yesterday, December 26.
 The trading platform also stated that the refunds will be handled shortly.
 Although the platform noticed the attack quickly and reacted swiftly, the attacker was still able to transfer 86.5 ETH.
 Following Thunder’s announcements, the attacker reacted, claiming that Thunder’s posts were “all lies.” The claim came through an on-chain note pointed out by the on-chain sleuth, ZachXBT. The address, seemingly belonging to the attacker, also left a message saying:
 <blockquote>
 Also, we have all the user data. 50 ETH, and we will delete the data.
 </blockquote>
 Thunder has published a separate incident report, explaining that the exploit occurred through withdrawal requests that the platform’s servers considered authorized due to leaked session tokens.
 In addition to the stolen Ether, the platform admitted that around 439 SOL ($47,800) were also taken from its platform.
 However, it insisted that all lost funds would be fully refunded and that affected users would not have to pay fees. Furthermore, they will receive $100k in credits each.
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Results from the incident are as follows: – 86.5611512804 ETH lost – 439.12232317 SOL lost
 All funds lost will be refunded in full and affected users will be given 0% fees and $100k in credits each.
 — Thunder (@ThunderTerminal) December 27, 2023
 </blockquote>
 
 <h2 id="thunder-introduces-additional-security-measures">Thunder Introduces Additional Security Measures</h2>
 The platform also listed several measures to prevent further malicious withdrawals and access to session tokens.
 Those include revoking all pre-existing connection URLs and session tokens. In addition, Thunder said that all current and future connection URLs can only be accessed and used directly from the platform’s servers.
 As for the incident, the platform said that its legal team and the FBI have been contacted and are undergoing a full technical audit. It will also add 2FA immediately for withdrawals and extra security regarding session issuing.
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 We have taken the following actions: – Our legal team and the FBI have been contacted. – We are now undergoing a full, technical audit. – We are working on adding 2FA immediately for withdrawals. – We are adding additional security regarding session issuing. – We know which…
 — Thunder (@ThunderTerminal) December 27, 2023
 </blockquote>
 
 Lastly, Thunder Terminal said that it knows which services the attacker used to conduct the theft and that Thunder will pursue them as aggressively as possible.
 <h3 id="related-news">Related News:</h3>
 <ul>
 <li>Hackers Loot Nearly $700k After Hacking Vitalik’s Twitter Account</li>
 <li>Crypto hackers steal $3 billion in 2022, expected to surpass the previous year’s record</li>
 <li>North Korean Hackers Switch Tactics And Tools To Get Your Holdings</li>
 </ul>
 Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/thunder-terminal-loses-192-000-in-hacking-attack-tbt74979.html">https://thebittimes.com/thunder-terminal-loses-192-000-in-hacking-attack-tbt74979.html</a>
</div>

Thunder Terminal Loses $192,000 In Hacking Attack

Table of Contents

TheBitTimes

Other articles published on Dec 28, 2023

Binance, Kraken, and 7 other crypto exchanges URLs to be blocked in India

Crypto Regulation: India Sends Crucial Warning to Crypto Exchanges

PiLab Technology and Mirae Asset Securities to build Web3 infrastructure to navigate tokenized se...

Terra (LUNA) Developers Report That the Network Experiencing an Issue

Bitcoin’s final showdown of 2023 is worth $10 billion

Bitcoin Price Prediction: Surges to $43,500, MicroStrategy’s Holdings Exceed $8B

Join our free newsletter for daily crypto updates!