According to Paradigm researcher Samczsun’s tweet , at 3:25 pm on May 20th, Taiwan time, Tornado Cash suffered a governance attack. Tornado Cash protocol governance actually no longer exists because the attacker awarded himself 1.2 million votes through a malicious proposal, more than The number of legal votes (approximately 700,000) is increased, and then full governance control is obtained.
Through governance control, Samczsun pointed out , the attacker can withdraw all locked votes, clear all tokens in the governance contract, and block the router. He also added that the Tornado Cash Nova deployed to Gnosis Chain is a governance-managed proxy, so an attacker could also upgrade the contract to drain all the ETH in the pool.
The attacker got 483,000 TORN
Ember Yu, an analyst on the chain, said that the attacker’s address 0x092123663804f8801b9b086b03B98D706f77bD59 obtained a total of 483,000 TORN from the governance treasury. Currently, 6,000 TORN have been deposited in the Bitrue exchange, and another 379,300 TORN have been sold on the chain and converted into 375 ETH, with an average selling price of $1.8, and 97,700 TORN have not been sold or transferred out:
Those who attack Tornado get TORN → sell it in exchange for ETH → wash it out with Tornado mixed currency.
According to TradingView data , after the governance attack, the price of TORN has fallen from $7.40 since 6:00 last night, and fell to $3.49 this morning, with a maximum drop of more than 50%. It is currently reported at $4.75, a drop of 25.1 in the past 24 hours %.
Binance Suspends TORN Deposits
When the Tornado Cash protocol encountered a governance attack, Binance officials announced earlier that in view of the situation of the Tornado Cash protocol, Binance will temporarily suspend TORN deposits until further notice.
