Share this article
Tornado Cash DAO Attacker Starts to Move Ether, TORN Tokens
The attacker holds over 20 ether in their wallet, and continues to have access to potentially all of Tornado Cash’s treasury funds as of Thursday.
May 25, 2023, 7:05 a.m.
Make us preferred on Google
The attacker behind a takeover of Tornado Cash DAO has apparently started to move their illicitly gained tokens, blockchain data shows.
Addresses tied to the attacker moved 100 ether and 38,000 torn (TORN) tokens in two transactions using the Tornado Cash protocol on Wednesday night, Etherscan data shows.
STORY CONTINUES BELOW
The DAO handling the privacy-focused crypto mixer's operations, funds and future plans was taken over by an unidentified attacker, or attackers, on Saturday.
The attacker holds over 20 ether ($35,684) in their wallet, and continues to have access to potentially all of Tornado Cash’s treasury funds.
The attacker floated a malicious proposal that hid a code function that granted them fake votes that can now be used to handle some aspects of Tornado Cash, such as torn tokens held in the main governance contract or withdrawal of locked torn tokens.
DAOs, short for decentralized autonomous organizations, allow token holders to lock up their holdings as votes for proposing changes to a project. These changes can range from deploying treasury funds to purposes that benefit the project to expansion on other networks.
The attack does not impact the actual Tornado Cash protocol – which allows users to pass funds through the service to mask or obscure the movements of funds and crypto addresses. This attack was not an exploit of any smart contracts or technology related to the working of Tornado Cash.
As such, there’s still hope for Tornado Cash.
The attacker floated a proposal to revert all malicious changes before the takeover earlier this week – sending torn prices up 10% at the time.
The proposal looks as though it will pass when voting closes on May 26, though it's unclear when the action will be executed. However, if it does, the malicious code will be removed and the governance of Tornado Cash's DAO will go back to token holders.
More For You
Pudgy Penguins is building a multi-vertical consumer IP platform — combining phygital products, games, NFTs and PENGU to monetize culture at scale.
What to know:
Pudgy Penguins is emerging as one of the strongest NFT-native brands of this cycle, shifting from speculative “digital luxury goods” into a multi-vertical consumer IP platform. Its strategy is to acquire users through mainstream channels first; toys, retail partnerships and viral media, then onboard them into Web3 through games, NFTs and the PENGU token.
The ecosystem now spans phygital products (> $13M retail sales and >1M units sold), games and experiences (Pudgy Party surpassed 500k downloads in two weeks), and a widely distributed token (airdropped to 6M+ wallets). While the market is currently pricing Pudgy at a premium relative to traditional IP peers, sustained success depends on execution across retail expansion, gaming adoption and deeper token utility.
More For You
Bitcoin's Quantum threat is ‘real but distant,’ says Wall Street analyst as doomsday debate rages on
Wall Street broker Benchmark argued the crypto network has ample time to evolve as quantum risks shift from theory to risk management.
What to know:
- Broker Benchmark said Bitcoin’s main vulnerability lies in exposed public keys, not the protocol itself.
- Coinbase’s new Quantum Advisory Council marks a shift from theoretical concern to institutional response.
- Bitcoin’s architecture is conservative but adaptable, according to Benchmark analyst Mark Palmer, with a long runway for upgrades.
Top Stories
