Tornado Cash, a platform that allows users to mix their crypto transactions for privacy, has been hit by an attack.
Tornado Cash Hit by Attack
Tornado Cash, a platform that allows users to mix their crypto transactions for privacy, has been hit by an attack.
An unknown attacker or group of attackers managed to hijack the DAO that oversees the operations, funds, and future plans of Tornado Cash. The attacker created a malicious proposal that gave them fake voting power. This granted the attacker 1,200,000 votes out of 700,000 legitimate ones, giving them full control over governance aspects of Tornado Cash, such as the TORN tokens held in the main governance contract or the ability to withdraw locked torn tokens.
According to PeckShield, the attacker swapped 380K TORN for 375 ETH (roughly $680,000) and transferred 372 ETH into Tornado Cash. It still has 97.7K TORN tokens in its wallet.
The attack does not affect the security of the Tornado Cash protocol itself, which is still functioning normally. However, it has caused a significant drop in the price of TORN, the native token of Tornado Cash, which fell by 40% after the attack.
