Thunder Terminal, an on-chain trading platform, recently announced the successful prevention of a major security breach that threatened $240,000 and affected 114 wallets. Despite the platform's reassurances, the hackers have countered these claims, insisting on a ransom for the allegedly compromised user data.
On December 27, Thunder Terminal released an incident report detailing the attack. The breach resulted in the loss of 86.5 Ether and 439 Solana, totaling around $240,000, all within a span of nine minutes. The platform identified the cause as unauthorized access to a MongoDB connection URL, which enabled the attacker to execute unauthorized withdrawals.
Thunder Terminal has confirmed that the incident did not compromise any private keys or wallets. They have committed to fully reimbursing the affected users, covering 100% of the losses. Additionally, the affected users will be compensated with $100,000 in platform credits. The platform emphasized that only a small fraction (114 out of 14,000 wallets) were impacted by the breach.
Contradicting Thunder Terminal's assurances, the hackers have left a message on Etherscan claiming that the platform is lying about the extent of the data breach. They are demanding a ransom of 50 Ether (approximately $110,000) in exchange for the deletion of the stolen user data. According to the hackers, they hold all the user data and are threatening its release unless their demands are met.
Thunder Terminal has vowed to enhance its security measures and is open to negotiating with the hackers to recover the stolen funds. In their response, Xunlei, the company behind Thunder Terminal, stated that they do not hold users' private keys, making it impossible for attackers to gain direct access. Meanwhile, Etherscan data reveals that the hacker's wallet transferred 86.3 ETH to the Railgun protocol, a service enabling anonymous transactions. Thunder Terminal, launched by Eversify Labs in late 2022, aims to compete with other trading platforms like Telegram's Unibot, especially in the wake of the recent surge in memecoin popularity.
