Thunder Terminal Got Hacked, 86 ETH and 439 SOL Lost

  • On-chain trading platform Thunder Terminal was hacked with 86 ETH and 439 SOL on December 27.
  • The exchange reassured customers that neither private keys nor wallets were compromised.
  • Hackers demanded 50 ETH, or else they would delete all user data they claimed to possess.

On-chain trading platform Thunder Terminal announced that the funds are safe after the exchange got hacked with 86 ETH and 439 SOL. Hackers, however, claimed that they had all the users’ data and were demanding 50 ETH or else they would delete it. 

On December 27, Thunder shared that at 12:11:47 AM (UTC), suspicious withdrawals started to happen while a malicious actor got access to a MongoDB connection URL. MongoDB is a cloud database provider. The hackers reportedly used the URL to pull session tokens and execute withdrawals on behalf of the trading platform users. 

Thunder claimed that it had managed to stop the malicious act in nine minutes, saying, “At 12:20:35 AM UTC, the last malicious withdrawal happened.” Thunder stated that all session tokens and all kinds of access to transaction signing were revoked for security reasons. 

The exchange reassured customers that neither private keys nor wallets were compromised. Additionally, they explained that the exploit happened through withdrawal requests that their server considered authorized due to the leaked session tokens. Thunder said:

We do not store any private keys, so the attacker does not have access to any wallets. Desktop wallets were not affected. Less than 1% of wallets on our platform were affected as a result of this attack.

Interestingly, the hackers claimed that the funds weren’t safe and the private keys were compromised. As an input data message in the Ethereum transaction hash, the hackers said, “All lies. Also, we have all the user data. 50 ETH and we will delete the data.”

The amount lost from the incident was 86.5611512804 ETH and 439.12232317 SOL, according to Thunder. Moreover, the on-chain trading platform stated that all lost funds will be refunded in full, and affected users will be given 0% fees and $100K in credits each. 

Furthermore, Thunder stated that they have taken measures to prevent further malicious withdrawals and future access to session tokens. 

Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

Comments

Post a Comment

Popular posts from this blog

Ripple XRP Price Prediction: New Year 2024

Image
Ripple ’s XRP token has seen a significant rise in its price this year. Since January 2023, the asset has surged by over 80%. However, the popular cryptocurrency remains overshadowed by others, such as Solana (SOL), which grew by over 1000%, and Bitcoin (BTC), which rallied by nearly 160% in the same time frame. Also Read: Ripple XRP Forecasted To Surpass its ATH of $3.40, Here is When XRP saw a massive spike in its price, reaching $0.82 after a US district court ruled that Ripple selling the token to retail clients did not breach securities law. However, the US SEC (Securities and Exchange Commission) has taken the lawsuit to the high court. There is a possibility that the high court will rule similarly to the district court. However, XRP’s price has stagnated over its legal unclarity. The asset has yet to reclaim its July 2023 levels and is since down almost 24%. Ripple XRP price prediction for New Year 2024 Source – The Coin Republic According to Chang...
Read more

Ethereum Foundation swaps Ether worth $2.7 Million, ETH dips

The swap was done on Uniswap. Ethereum (ETH) had dropped 1.64% at the time of writing to trade at $1,593.66. Ethereum Foundation’s significant holdings of Ether influence market dynamics despite its decentralized nature. The Ethereum Foundation, a key player in the development and ecosystem of the Ethereum network, sold a portion of its allocated Ether ( ETH ) tokens. A wallet identified as “0x9eE457023bB3De16D51A003a247BaEaD7fce313D,” labelled as a “Grant Provider” on blockchain tracker Etherscan, executed a swap of over 1,700 ETH for $2.7 million in USDC on the Uniswap decentralized exchange. Market reaction and impact The sale of ETH tokens by the Ethereum Foundation triggered a reaction in the cryptocurrency market. Ether’s price dipped by approximately 1.5% within a few hours, and over the subsequent 24-hour period, the drop extended to 1.8%. This event led to a temporary slump in the value of Ether and affected ot...
Read more

EV Charging Payments App on Blockchain Raises $310k in Presale – Invest Early in Future-Proof Project

Image
C+Charge is an upcoming EV charging payment app that aims to streamline the charging process and provide rewards to users. The app will connect EV owners with charging networks, allowing for easy payment transactions and earning carbon credits and sustainable cryptocurrency rewards in the process.  Utilizing decentralized blockchain technology, C+Charge's P2P payment system is making EV charging more efficient, cost-effective, and transparent. The platform's rewards system is one of its defining Features . By using C+Charge's utility token, CCHG, to pay for charges, EV drivers can earn carbon credits that can be used for a variety of purposes such as offsetting carbon footprint or even offsetting travel.  Additionally, C+Charge's partnership with Flowcarbon allows for tokenized carbon credits through Flowcarbon's Goodness Nature Token ($GNT) to be earned as well. C+Charge's goal is not just about earning rewards, but also bringing standardiza...
Read more