Bounty

Ethereum

Stronger

Security

<div class="fintechs">
 <div class="wp-block-image">
 <figure class="aligncenter size-full"><img decoding="async" width="640" height="427" src="https://cdn.thebittimes.com/images/2023/12/28/eb7ffc6a90b47368809e2cd1b10bb5bd.webp" alt="" class="wp-image-43450" srcset="https://cdn.thebittimes.com/images/2023/12/28/933001fe4561e23ec4462990203e738d.webp 750w, https://cdn.thebittimes.com/images/2023/12/28/933001fe4561e23ec4462990203e738d.webp 300w" sizes="(max-width: 640px) 100vw, 640px" data-recalc-dims="1">
 </figure>
 </div>
 <h4 class="wp-block-heading has-text-align-center">Thunder Terminal’s Major Security Breach and Ongoing Recovery</h4>
 In a shocking turn of events, Thunder Terminal, a prominent on-chain trading protocol operating on Ethereum, Solana, Arbitrum, Base, and Avalanche, recently found itself amid a significant security breach. While the breach caused substantial concern, Thunder Terminal has taken robust steps to address the issue and restore user confidence.
 <h2 class="wp-block-heading" id="strong-recovery-efforts-and-enhanced-security-strong">Recovery Efforts and Enhanced Security</h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 No one's private keys are compromised. Only 114 wallets out of over 14,000 were affected. Funds are safe going forward. We stopped the attack in &lt;9 minutes. https://t.co/BPzeAg4cz8— Thunder (@ThunderTerminal) December 27, 2023
 </blockquote>
 </div>
 </figure>
 Following the breach, Thunder Terminal acted swiftly to rectify the situation. They engaged the FBI to investigate the incident, demonstrating their commitment to resolving it thoroughly and professionally. In an update, Thunder Terminal announced that its platform would be live and trading would resume on December 28th, reassuring users that their assets would be safeguarded with enhanced security measures.
 The Thunder Terminal team has been hard at work implementing crucial security enhancements:
 <ol class="">
 <li class="">Comprehensive Wallet Security: Thunder Terminal has reworked its wallet security from the ground up to ensure maximum protection.</li>
 <li class="">Mandatory 2FA: The platform now mandates two-factor authentication (2FA) for withdrawals, transfers, and device verification, adding an extra layer of security.</li>
 <li class="">Bug Bounty Program: Thunder Terminal has launched a bug bounty program to encourage proactive security, inviting ethical hackers to help identify and fix vulnerabilities.</li>
 <li class="">Third-party Technical Audit: Thunder Terminal is expediting its third-party technical audit to ensure security and transparency.</li>
 <li class="">Deep Clean: The platform underwent an extensive deep clean of its security measures and internal architecture, signifying a comprehensive effort to fortify its defences.</li>
 </ol>
 <h2 class="wp-block-heading" id="strong-compensation-and-user-support-strong">Compensation and User Support</h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Compensation Summary We have refunded full losses to affected users: – 86.5611512804 ETH (https://t.co/XGXPMIRxCH) – 439.12232317 SOL (https://t.co/aShbqlETIN) – Their accounts have also been given 0% fees (lifetime) and $100k in credits each, regardless of funds lost. -…— Thunder (@ThunderTerminal) December 28, 2023
 </blockquote>
 </div>
 </figure>
 Thunder Terminal has committed to its users by offering compensation for the losses incurred during the breach. The affected users have received full refunds for their losses, amounting to 86.5611512804 ETH and 439.12232317 SOL, valued at approximately $250,000 at the time of the breach. Moreover, these users have been granted a lifetime exemption from fees and a generous credit of $100,000 each.
 The platform has issued over $10 million worth of credits to support affected users. Remarkably, most of Thunder Terminal’s users, exceeding 99%, were unaffected by this exploit, ensuring the vast user base remains secure.
 Thunder Terminal has introduced a points boost and 0% fee trading for several days to make amends for the downtime. Additionally, all paying users have been granted an extension on their subscriptions.
 <h2 class="wp-block-heading" id="strong-the-exploit-unveiled-strong">The Exploit Unveiled</h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Incident Report At 12:11:47 AM UTC, suspicious withdrawals started getting sent through Thunder wallets. A malicious actor got access to a MongoDB connection URL which they used to pull session tokens and execute withdrawals on behalf of users. At 12:20:35 AM UTC, the last…— Thunder (@ThunderTerminal) December 27, 2023
 </blockquote>
 </div>
 </figure>
 The security breach came to light around midnight when Thunder Terminal noticed unauthorised withdrawals from user wallets. According to the incident report, an attacker gained access to a URL, allowing them to take over users’ sessions and initiate withdrawals as if they were legitimate users.
 Fortunately, the breach lasted only a few minutes before Thunder Terminal swiftly revoked all session tokens and transaction signing access, mitigating the damage. Significantly, no private keys or wallets were compromised, and the desktop application remained unaffected. Thunder Terminal reported that less than 1% of wallets on the platform were affected.
 <h2 class="wp-block-heading" id="strong-legal-and-technical-actions-in-progress-strong">Legal and Technical Actions in Progress</h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 internal update: – FBI involved already – site will be back online later today – additional security measures will be put into place before it goes online – refunds will be issued soon – deep clean still underway— jackson (@semperveritas0) December 27, 2023
 </blockquote>
 </div>
 </figure>
 Thunder Terminal has reported the breach to the FBI and is actively pursuing a technical audit to investigate the incident further. The platform implements two-factor authentication (2FA) for withdrawals to fortify security. They are also taking legal action against the attacker responsible for this breach.
 Importantly, Thunder Terminal has confirmed that none of its team members’ accounts were compromised and that the breach was not the result of internal errors, providing reassurance to users and investors.
 <h2 class="wp-block-heading" id="strong-crypto-security-in-2023-strong">Crypto Security in 2023</h2>
 The Thunder Terminal breach is a sobering reminder of the cryptocurrency industry’s persistent threats. In 2023, the decentralised finance (DeFi) sector reported losses of approximately $1.95 billion, with Ethereum emerging as the most vulnerable chain, accounting for losses of around $1.35 billion through 170 breaches.
 Notably, 2023 also witnessed a remarkable decrease of over 50% in hack volumes within the crypto industry, according to TRM Labs. This decline is attributed to improved security measures, increased law enforcement actions, and enhanced collaboration within the industry. Consequently, this marks the first instance of a reduction in stolen amounts since 2020, as reported by De.FI, a Web3 security firm, revealed that approximately $2 billion in crypto was stolen by hackers throughout the year.
 As Thunder Terminal navigates the aftermath of its security breach, it is a testament to the industry’s resilience and determination to protect user assets and uphold security standards. The crypto space continues to evolve, with security and transparency at the forefront of its priorities. 
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/thunder-terminal-bounces-back-stronger-after-the-security-challenge-tbt74980.html">https://thebittimes.com/thunder-terminal-bounces-back-stronger-after-the-security-challenge-tbt74980.html</a>

Thunder Terminal Bounces Back Stronger After The Security Challenge

Table of Contents

TheBitTimes

Other articles published on Dec 28, 2023

Mark Shifke Will Replace Barry Silbert of Grayscale Investments

2024 investment landscape: Polkadot, Cardano, and Pullix on experts’ radar

FTM Price Prediction: Will FTM Stretch Up Move Toward $0.6000?

What’s fueling the sudden surge in geopolitical tensions?

Binance Founder CZ Seeks Court Approval for Travel Amid Legal Woes

Ethereum Wallet Linked to Trump’s NFTs Reportedly Moves $2.4M Worth Of ETH

Join our free newsletter for daily crypto updates!