Security Incident
Tornado Cash Governance Attack
SlowMist founder Cos tweeted that there is a backdoor code in the Tornado Cash IPFS version frontend that hijacks deposit certificates.
- Attack category
- Governance Attack
Incident Overview
A governance attack led to malicious proposals being passed, and the malicious code has been present for about two months.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.