{"id":139609,"date":"2023-05-22T05:59:25","date_gmt":"2023-05-22T05:59:25","guid":{"rendered":"https:\/\/crypto-economy.com\/?p=139609"},"modified":"2023-05-22T10:57:22","modified_gmt":"2023-05-22T10:57:22","slug":"tornado-cash-hijacked-hackers-take-control-of-governance","status":"publish","type":"post","link":"https:\/\/crypto-economy.com\/tornado-cash-hijacked-hackers-take-control-of-governance\/","title":{"rendered":"Tornado Cash Hijacked; Hackers Take Control Of Governance"},"content":{"rendered":"<p style=\"text-align: justify\"><strong>Tornado Cash<\/strong>, the infamous <a href=\"https:\/\/crypto-economy.com\/virtual-currencies\/\" target=\"_blank\" rel=\"noopener\">cryptocurrency <\/a>mixer, <strong><span data-preserver-spaces=\"true\">suffered\u00a0<\/span><\/strong><strong>another setback as an attacker managed to seize full control of the platform\u2019s governance through a malicious proposal.<\/strong><!--more--><\/p>\n<p style=\"text-align: justify\">According to <a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2023-05-21\/sanctioned-crypto-mixer-tornado-cash-hijacked-by-hackers#xj4y7vzkg\" target=\"_blank\" rel=\"noopener\">reports<\/a>, Samczsun, a security researcher at crypto investment firm Paradigm, revealed on Twitter that an attacker granted themselves 1.2 million fake votes on Saturday. <strong>As the fake votes exceeded the 700,000 legitimate votes, it allowed the attacker to gain full control over the governance of Tornado Cash.<\/strong><\/p>\n<p style=\"text-align: justify\">With complete control over Tornado Cash\u2019s governance, the attacker proceeded to withdraw 10,000 votes as TORN and subsequently sold them for personal gain. The unversed Tornado Cash token (TORN) is the governance token of the crypto mixer.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">On 2023\/05\/20 at 07:25:11 UTC, Tornado Cash governance effectively ceased to exist. Through a malicious proposal, an attacker granted themselves 1,200,000 votes. As this is more than the ~700,000 legitimate votes, they now have full control.<a href=\"https:\/\/t.co\/nY87XmrYgT\" target=\"_blank\">https:\/\/t.co\/nY87XmrYgT<\/a> <a href=\"https:\/\/t.co\/h9qjc3xRqz\" target=\"_blank\">pic.twitter.com\/h9qjc3xRqz<\/a><\/p>\n<p>&mdash; @samczsun.com (@samczsun) <a href=\"https:\/\/twitter.com\/samczsun\/status\/1660012956632104960?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">May 20, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2 style=\"text-align: justify\">Hacker Submits Proposal To Undo Attack<\/h2>\n<p style=\"text-align: justify\">In response to the attack, Tornado Cash\u2019s active community member known as Tornadosaurus-Hex confirmed that all funds within the Governance system were potentially compromised. They urged all members to withdraw their locked funds from governance to safeguard their assets. <strong>However, shortly after the attack, a <a href=\"https:\/\/forums.tornadocash.community\/t\/attacker-has-a-new-proposal-to-potentially-restore-the-state-of-governance\/183\/4\" target=\"_blank\" rel=\"noopener\">proposal<\/a> was submitted by a wallet address linked to the recent attack, suggesting <span data-preserver-spaces=\"true\">reversing\u00a0<\/span> the malicious changes. <\/strong><\/p>\n<p style=\"text-align: justify\">Tornadosaurus-Hex wrote in the\u00a0Tornado Cash community forum, <em>&#8220;The attacker posted a new proposal to restore the state of governance&#8221;,\u00a0<\/em>adding there is a<em> &#8220;good chance&#8221;<\/em> that the attacker would execute it. <strong>The user claimed the attacker is reverting the hijacked TORN tokens, which gave them a controlling share of the governance votes, back to zero.<\/strong><\/p>\n<p style=\"text-align: justify\"><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter wp-image-139616 size-full\" src=\"https:\/\/crypto-economy.com\/wp-content\/uploads\/2023\/05\/Torando-Cash-New-Proposal-e1684732599703.jpg\" alt=\"Hacker Submits Proposal To Undo Attack\" width=\"825\" height=\"364\" srcset=\"https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/05\/Torando-Cash-New-Proposal-e1684732599703.jpg 825w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/05\/Torando-Cash-New-Proposal-e1684732599703-300x132.jpg 300w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/05\/Torando-Cash-New-Proposal-e1684732599703-768x339.jpg 768w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<p style=\"text-align: justify\">When the proposal passes, the malicious code that the attacker integrated into the protocol, which allowed them to steal voting power from others, will be removed, <b>and the governance of Tornado Cash&#8217;s DAO will go back to token holders<\/b>.<\/p>\n<h2 style=\"text-align: justify\">Tornado Cash&#8217;s Chronic Troubles<\/h2>\n<p style=\"text-align: justify\">Following the news, TORN jumped 6.22% in the last 24 hours to trade at $4.62. However, the token is still reeling under severe pressure over the past seven days due to the recent hijack. Meanwhile, <span style=\"font-size: inherit;background-color: var(--base-3);color: var(--contrast)\">0xdeadf4ce, an active member of the TORN community,\u00a0<\/span><strong>pointed out<\/strong><span style=\"font-size: inherit;background-color: var(--base-3);color: var(--contrast)\"><strong>\u00a0that this might all be a <em>\u201cgigatroll\u201d <\/em>to depress the price of the token to increase their holdings at a discount.<\/strong><\/span><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">TornadoCash attacker deployed new proposal that, if executed, would seemingly revert the damage done to the Governance functionality. Either they&#39;re giga trolling or it will end up being an expensive but not disastrous lesson in Governance security.<a href=\"https:\/\/t.co\/QMWYFsi8kP\" target=\"_blank\">https:\/\/t.co\/QMWYFsi8kP<\/a><\/p>\n<p>&mdash; 0xdeadf4ce (@0xdface) <a href=\"https:\/\/twitter.com\/0xdface\/status\/1660395508521738240?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">May 21, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p style=\"text-align: justify\"><strong>The decentralized currency mixer was sanctioned by the US Department of the Treasury&#8217;s Office of Foreign Assets Control (OFAC) on August 8, 2022<\/strong>, for allowing hackers to launder nearly $7 billion in cryptocurrency since 2019. As per the United States Treasury Department, Tornado Cash had served as a key tool for the Lazarus Group, a North Korean hacking group tied to the $625 million hack of Axie Infinity\u2019s Ronin Network in March 2022.<\/p>\n<div class=\"social-urlstyles__StyledWrapper-qwjbib-0 JSJa\">\n<div class=\"social-url twitter\">\n<div style=\"text-align: justify\"><\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Tornado Cash, the infamous cryptocurrency mixer, suffered\u00a0another setback as an attacker managed to seize full control of the platform\u2019s governance through a malicious proposal.<\/p>\n","protected":false},"author":21,"featured_media":139655,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84,111,74],"tags":[5258,4708],"_links":{"self":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/139609"}],"collection":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/comments?post=139609"}],"version-history":[{"count":0,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/139609\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media\/139655"}],"wp:attachment":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media?parent=139609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/categories?post=139609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/tags?post=139609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}