Thunder Terminal platform loses over $247 000 in an exploit
The hackers also demanded a ransom for deleting customer data
27.12.2023 - 12:12
635
3 min
0
What’s new? Decentralized trading platform Thunder Terminal has suffered an exploit as a result of a hack of third-party database management provider MongoDB Atlas. As a result, 114 users of the platform lost 86,56 ETH and 439 SOLs totaling over $247 000. Thunder’s developers claim that the private keys and wallets of the 14 000 users were not compromised. In response, the hackers accused them of lying, specifying that they had all the customer data.
What else is known? Thunder claims to have stopped the attack in less than nine minutes and all assets are currently safe. They assured that they do not store private keys, so attackers do not have access to wallets, and less than 1% of wallets on the platform were affected as a result of the exploit of the withdrawal request processing system.
The company has begun a full technical audit and integration of a two-factor authentication system for withdrawals and has also contacted the FBI. At the same time, it said it was ready to negotiate on the terms of returning funds to users. “Otherwise, we intend to pursue this crime to the fullest extent of the US judicial system,” Thunder said.
The developers also assured that those affected will receive full compensation for damages, bonus internal points, and the ability to trade with zero fees.
P2P platform NFT Trader loses $3 million in assets due to an exploit
The tokens were purchased from an unknown user by Boring Security for 10% of the value
In turn, the hackers said in a comment on the on-chain transaction that all words about the safety of funds are lies. They demanded another 50 ETH coins for deleting the database of users at their disposal. At the exchange rate at the time of writing, the ransom is $113 950.
Earlier, TRM Labs reported that the damage from hacks of crypto projects in 2023 decreased by 50%, while the number of incidents remained virtually unchanged (about 160).
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026

Telegram
Twitter