Tornado Cash

Tornado

<div class="playHtListenArea" style="display:none;margin: 0;">
		<div id="playht-audioplayer-element" data-play-article="https://crypto.ro/en/?p=21648" data-play-audio="https://media.play.ht/full_-NW2lRflpFsDvFH3wJcP.mp3?generation=1684764227541608&alt=media">
		</div>
	</div>
	<p>In a recent security breach, the decentralized autonomous organization (DAO) responsible for managing Tornado Cash, the privacy-focused crypto mixer, fell victim to an unidentified attacker or group of attackers.</p>
<p>The incident resulted in the attacker gaining control of the DAO&#8217;s operations and funds. However, it is important to note that the attack did not compromise the functionality or security of the Tornado Cash protocol itself, which enables users to obfuscate their cryptocurrency transactions.</p>
<p>DAOs allow token holders to lock up their holdings as votes for proposing changes to a project. In this case, the attacker submitted a malicious proposal that hid a code function, granting them fake votes and control over some aspects of Tornado Cash, such as <a href="https://crypto.ro/en/cryptocurrencies/tornado-cash/">TORN</a> tokens held in the main governance contract or withdrawal of locked TORN tokens. The attacker then withdrew 10,000 votes as TORN tokens and sold them.</p>
<blockquote class="twitter-tweet" data-width="500" data-dnt="true">
<p lang="en" dir="ltr">Now that they have all the votes, they can do whatever they want. In this case, they simply withdrew 10,000 votes as TORN and sold it all<a href="https://t.co/XxYezHusK6" rel="nofollow" target="_blank">https://t.co/XxYezHusK6</a> <a href="https://t.co/qOefI65SLk" rel="nofollow" target="_blank">pic.twitter.com/qOefI65SLk</a></p>
<p>&mdash; @samczsun.com (@samczsun) <a href="https://twitter.com/samczsun/status/1660012963603030016?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">May 20, 2023</a></p></blockquote>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p>
<p>This illicit action caused a significant slump in Torn prices, which dropped by as much as 40% in the past 24 hours.</p>
<figure id="attachment_21649" aria-describedby="caption-attachment-21649" style="width: 1858px" class="wp-caption alignnone"><img decoding="async" class="wp-image-21649 size-full" src="https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN.jpg" alt="Tornado Cash Price Chart TORN" width="1858" height="792" srcset="https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN.jpg 1200w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-300x128.jpg 300w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-1024x436.jpg 1024w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-768x327.jpg 768w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-750x320.jpg 750w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-1140x486.jpg 1140w" sizes="(max-width: 1858px) 100vw, 1858px" title="Tornado Cash governance attack triggers TORN token price fluctuations 1"><figcaption id="caption-attachment-21649" class="wp-caption-text">Tornado Cash Price Chart (TORN) | CoinMarketCap</figcaption></figure>
<p>Despite the breach, the <a href="https://forums.tornadocash.community/t/attacker-has-a-new-proposal-to-potentially-restore-the-state-of-governance/183/4" rel="nofollow noopener" target="_blank">Tornado Cash community</a> has swiftly responded, introducing new proposals aimed at reverting the malicious changes made by the attacker.</p>
<p>Notably, one community member highlighted that the attacker had <a href="https://forums.tornadocash.community/t/proposal-to-revert-state-changes/180" rel="nofollow noopener" target="_blank">minted</a> over 1 million TORN tokens, valued at over $4 million. The proposed solution involves restoring the governance state by eliminating the malicious code and redistributing voting power to token holders.</p>
<p>Encouragingly, a recent proposal submitted by a wallet address connected to the attack suggests that the attacker is willing to reverse their actions voluntarily.</p>
<p>The <a href="https://forums.tornadocash.community/t/proposal-to-revert-state-changes/180" rel="nofollow noopener" target="_blank">proposal aims to reset</a> the attacker&#8217;s TORN token holdings back to zero, effectively relinquishing the controlling share of governance votes they acquired. The voting process is currently underway and set to conclude on May 26, with a high likelihood of the proposal passing given the attacker&#8217;s significant holdings.</p>
<p>Upon the proposal&#8217;s successful execution, the malicious code integrated into the Tornado Cash protocol will be eliminated, restoring full governance control to token holders. As a result, the TORN token experienced a temporary surge, rising by up to 10% in value before stabilizing.</p>
<figure id="attachment_21650" aria-describedby="caption-attachment-21650" style="width: 1200px" class="wp-caption alignnone"><img decoding="async" class="wp-image-21650 size-full" src="https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN.png" alt="Tornado Cash Price Chart TORN" width="1200" height="1200" srcset="https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN.png 1200w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-300x300.png 300w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-1024x1024.png 1024w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-150x150.png 150w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-768x768.png 768w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-75x75.png 75w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-350x350.png 350w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-750x750.png 750w, https://crypto.ro/en/wp-content/uploads/2023/05/Tornado-Cash-Price-Chart-TORN-1140x1140.png 1140w" sizes="(max-width: 1200px) 100vw, 1200px" title="Tornado Cash governance attack triggers TORN token price fluctuations 2"><figcaption id="caption-attachment-21650" class="wp-caption-text">Tornado Cash Price Chart (TORN) | CoinGeiko</figcaption></figure>
<p>However, some members of the Tornado Cash community have expressed caution, considering the possibility that the attacker&#8217;s actions might be part of a deliberate attempt to manipulate token prices. The theory suggests that the attacker orchestrated the breach to depress the token&#8217;s value, potentially increasing their holdings at a discounted rate.</p>
<blockquote class="twitter-tweet" data-width="500" data-dnt="true">
<p lang="en" dir="ltr">TornadoCash attacker deployed new proposal that, if executed, would seemingly revert the damage done to the Governance functionality. Either they&#39;re giga trolling or it will end up being an expensive but not disastrous lesson in Governance security.<a href="https://t.co/QMWYFsi8kP" rel="nofollow" target="_blank">https://t.co/QMWYFsi8kP</a></p>
<p>&mdash; 0xdeadf4ce (@0xdface) <a href="https://twitter.com/0xdface/status/1660395508521738240?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">May 21, 2023</a></p></blockquote>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p>
<p>This attack on Tornado Cash is another instance highlighting the vulnerability of decentralized autonomous organizations and decentralized finance protocols to structural attacks. While traditional hacks exploit code vulnerabilities, these types of attacks involve manipulating governance systems.</p>
<p>The attacker behind this breach seems to have taken advantage of Tornado Cash&#8217;s recent designation as a sanctioned entity, possibly counting on the challenges associated with legal actions.</p>

Tornado Cash governance attack triggers TORN token price fluctuations

crypto.ro global

Other articles published on May 22, 2023

‘Severe recession’ unavoidable, finance expert warns, shares outlook for Bitcoin

Aave Price Prediction 2023-2032: Is AAVE a Good Investment?

The most expensive pizza ever: The Story of Laszlo Hanyecz and his 10,000 Bitcoin Purchase

3 Must Have Altcoins For A Bullish 2023

Shibarium — A Beginner’s Guide, Part 1

Matrix 3.0 Special AMA Transcript

Join our free newsletter for daily crypto updates!