Sign up to create alerts for Instruments,
Economic Events and content by followed authors
Free Sign Up Already have an account? Sign In
Quotes
All Instrument Types
- All Instrument Types
- Indices
- Equities
- ETFs
- Funds
- Commodities
- Currencies
- Crypto
- Bonds
- Certificates
Please try another search
Final hours: unlock premium data with Claim 60% OFF
Attacker hijacks Tornado Cash governance via malicious proposal
Published May 20, 2023 11:26PM ET
Updated May 22, 2023 01:00AM ET
The information was shared by @samczsun of research-driven technology investment firm Paradigm, who revealed that, when sharing the malicious proposal, the attacker claimed that it used a logic similar to a proposal that had previously passed by the community. However, this time, the proposal had an additional function.
As explained by @samczsun:
The total control over Tornado Cash governance allows the attacker to withdraw all of the locked votes, drain all of the tokens in the governance contract and brick the router. At the time of writing, the attacker “simply withdrew 10,000 votes as TORN and sold it all,” said @samczsun.
The attack comes as a reminder to crypto investors to vet proposal descriptions and logic. An active community of Tornado Cash, who goes by the name Tornadosaurus-Hex or Mr. Tornadosaurus Hex, confirmed that all funds in Governance are potentially compromised and requested all members to withdraw all funds locked in governance.
As shown above, they also attempted deploying a contract that could potentially revert the changes while still suggesting the community to withdraw their funds. Cointelegraph also came across a distress call from one of Tornado Cash’s community developer who confirmed the above developments, stating:
The team is currently in search of Solidity developers that can help save the protocol from extinction. They additionally stated that “we need contact with Binance - this exchange has more tokens than the attacker.”
The developer hopes the solution will empower “the community to defend against hackers abusing the anonymity sets of honest users without requiring blanket regulation or sacrificing on crypto ideals.”
Magazine: ‘Moral responsibility’: Can blockchain really improve trust in AI?
Magazine: ‘Moral responsibility’: Can blockchain really improve trust in AI?
Related Articles
Add Chart to Comment
Confirm Block
Are you sure you want to block %USER_NAME%?
By doing so, you and %USER_NAME% will not be able to see any of each other's Investing.com's posts.
%USER_NAME% was successfully added to your Block List
Since you’ve just unblocked this person, you must wait 48 hours before renewing the block.
Report this comment
I feel that this comment is:
Comment flagged
Thank You!
Your report has been sent to our moderators for review
Add a Comment
We encourage you to use comments to engage with other users, share your perspective and ask questions of authors and each other. However, in order to maintain the high level of discourse we’ve all come to value and expect, please keep the following criteria in mind:
Enrich the conversation, don’t trash it.
Stay focused and on track. Only post material that’s relevant to the topic being discussed.
Be respectful. Even negative opinions can be framed positively and diplomatically. Avoid profanity, slander or personal attacks directed at an author or another user. Racism, sexism and other forms of discrimination will not be tolerated.
Perpetrators of spam or abuse will be deleted from the site and prohibited from future registration at Investing.com’s discretion.