{"id":175754,"date":"2023-05-21T05:39:13","date_gmt":"2023-05-21T05:39:13","guid":{"rendered":"https:\/\/precoinnews.com\/?p=175754"},"modified":"2023-05-21T05:39:13","modified_gmt":"2023-05-21T05:39:13","slug":"attacker-hijacks-tornado-cash-governance-via-malicious-proposal","status":"publish","type":"post","link":"https:\/\/precoinnews.com\/crypto\/attacker-hijacks-tornado-cash-governance-via-malicious-proposal\/","title":{"rendered":"Attacker hijacks Tornado Cash governance via malicious proposal"},"content":{"rendered":"
Adding to the existing roadblocks of the decentralized crypto mixer Tornado Cash, an attacker managed to gain full control of the governance through a malicious proposal.\u00a0<\/p>\n
On May 20 at 3:25 ET, an attacker successfully granted 1.2 million votes to a malicious proposal. Given that the proposal received more than 700,000 legitimate votes, the attacker gained total control over Tornado Cash governance.<\/p>\n
<\/p>\n
As explained by @samczsun:<\/p>\n
\n\u201cOnce the proposal was passed by voters, the attacker simply used the emergencyStop function to update the proposal logic to grant themselves the fake votes.\u201d<\/p>\n<\/blockquote>\n
<\/p>\n
As shown above, they also attempted deploying a contract that could potentially revert the changes while still suggesting the community to withdraw their funds. Cointelegraph also came across a distress call from one of Tornado Cash\u2019s community developer who confirmed the above developments, stating:<\/p>\n
\u201cThere was an attack on the protocol this morning that you already know about. All day, another community developer and I thought about what to do, but the situation is close to hopeless – currently the attacker controls Governance.\u201d<\/p><\/blockquote>\n
Related: Allbridge offers bounty to exploiter who stole $573K in flash loan attack<\/strong><\/p>\n
A former Tornado Cash developer is reportedly working on building a new crypto mixing service from scratch, which addresses the \u201ccritical flaw\u201d existing in Tornado Cash.<\/p>\n