Andrew Tate’s site was based on some OSS software that they didn’t credit (in violation of the license) and was an old version with known vulnerabilities. Which is why it got hacked.

I don’t know if Truth Social is in the same boat, but it’s possible. I think I heard it’s just Mastodon with federation turned off? Or am I thinking of some other crappy alt-right site?