http://w7m432cocr665kf5tlpcxojwldajr3njd2etcxwhpbrt44eemuxhp7ad.onion/pnd/catalog.html
It turned out they were using a VERY OLD and outdated version of PHP (10 years old) to run with their server software, and that version of PHP had lots of security vulnerabilities. 4chan was breached by "Soyjak Party" operatives who exploited outdated PHP code to access backend systems, leaking site source files and exposing moderator emails — some tied to .edu and .gov domains.