Thunder Terminal suffers hacker attack, losses amount to $240k

Multi-chain trading platform Thunder Terminal has suffered a hacker attack, saying a malicious actor gained access to a MongoDB connection.

In an X post on Dec. 27, Thunder Terminal acknowledged the breach, stating that the hacker gained access to a MongoDB connection URL.

This access allowed the intruder to retrieve session tokens and execute withdrawals on behalf of users.

The attack concluded at 12:20 AM UTC, Dec 27, after all session tokens and transaction signing access were revoked for security reasons, Thunder Terminal said.

While Thunder Terminal assured users that no private keys or wallets were compromised, the team admitted that “less than 1% of wallets” were affected. The attack reportedly resulted in funds being stolen from at least 114 wallets.

“The exploit happened through withdrawal requests our server considered as authorized because of leaked session tokens. We do not store any private keys, so the attacker does not have access to any wallets. Desktop wallets were not affected.”

Thunder Terminal

As of press time, it is unclear, how exactly the hacker got access to the project’s database. Thunder Terminal suggests that the hack may be related to an incident involving New York-based MongoDB. In mid-December, MongoDB detected “suspicious activity” on its network, later confirming that hackers had infiltrated its systems “for some period of time before discovery.”

According to blockchain sleuth ZachXBT, the attack transferred 86.5 ETH (worth around $192,500) to Railgun, a privacy-aimed protocol that enables users to anonymously swap cryptocurrencies and make private transactions. The project also revealed that the hacker stole over 439 SOL (around $49,160).

Initially, Thunder Terminal said the attack was related to a compromise of its third-party provider. The team also said “funds are safe,” adding that “refunds will be handled shortly.”

However, shortly after this post, the hacker issued a blockchain-based statement, accusing the Thunder Team of lying and threatening to disclose all user data unless the project pays them 50 ETH in ransom.

Launched in late 2022, Thunder Terminal is a multi-chain trading platform with support for Ethereum, Solana, Avalanche, and other networks.

Read more: Major crypto hacks of 2023: how industry lost over $1b within minutes
Follow Us on Google News

Comments

Post a Comment

Popular posts from this blog

U.S. Millionaire Says Gold Prices 'Will Go Very High'

Image
Millionaire and veteran investor in the U.S. markets Jim Rogers predicted that gold price s “will go very high” next. The XAU/USD index, which tracks the Spot Gold prices shows the precious above the $2,300 mark on Thursday. The commodity is attracting buying pressure from retail investors, institutional funds, and central banks of developing countries. Also Read: Goldman Sachs Predicts Copper Prices To Surge 20%, Hit $12,000 The massive accumulation is what’s driving gold price s up making it print new highs every month in 2024. Rogers explained that if there’s a problem in the stock market, gold price s stand to benefit and will be the first commodity to skyrocket. The global stock market remains on a slippery slope due to the ongoing conflict in the Middle East between Iran, Israel, and Palestine. Also Read: Chinese Businesses Hoard US Dollars Fearing the Yuan Could Weaken Gold Prices To Go ‘Very High’, Explains Jim Rogers Sour...
Read more

New York Attorney General Sues Celsius Co-Founder Alex Mashinsky for Crypto Fraud

On Jan. 5, 2023, the state of New York and attorney general Letitia James filed a lawsuit against Alex Mashinsky, the co-founder and former CEO of Celsius. The lawsuit claims that Mashinsky and Celsius defrauded “hundreds of thousands of investors, including more than 26,000 New Yorkers, out of billions of dollars worth of cryptocurrency.” Former CEO of Celsius Accused of Making False Promises, Misleading Investors The day after Core Scientific detailed that it was shutting down 37,000 bitcoin miners owned by Celsius, New York’s Attorney General filed a lawsuit against Alex Mashinsky, the former CEO of Celsius. The lawsuit alleges that Mashinsky “repeatedly made false and misleading statements about Celsius’s safety” and that he encouraged investors to “deposit billions of dollars in digital assets onto the platform.” According to the lawsuit, 26,000 New Yorkers are affected by the Celsius demise and James wants to ban Mashinsky from doi...
Read more

Cryptocurrency: Kevin O'Leary Predicts 'This' Will 100% Happen Again

Kevin O’Leary has been somewhat of a popular voice in the crypto currency industry over the past year. In mid-December 2022, he was called out by the community following his remarks about Binance. The Shark Tank host outrightly blamed Binance for putting FTX out of business. In retrospect,  Changpeng Zhao, the CEO of Binance called him a liar. Appearing in a recent interview with Kitco NEWS, O’Leary suggested that unregulated exchanges will continue collapsing one behind the other. Warning about potential meltdowns in the future, he said, “If you’re asking me if there’s going to be another meltdown to zero? Absolutely. One hundred percent it’ll happen, and it’ll keep happening over, and over and over again.” https://t.co/raCZhnbuJi — Kitco NEWS (@KitcoNewsNOW) January 16, 2023 Post the collapse of FTX, companies have collectively been striving to rekindle hope and win back the eroded trust of market participants. A...
Read more