Digital Asset
Intelligence
Security Incident

Tornado Cash Governance Attack

·Historical incident record

Incident Overview

SlowMist founder Cos tweeted that there is a backdoor code in the Tornado Cash IPFS version frontend that hijacks deposit certificates. A governance attack led to malicious proposals being passed, and the malicious code has been present for about two months.

Sources & References

Original incident referencehttps://gas404.medium.com/tornado-cash-notes-exploit-from-jan-1st-and-the-actions-you-must-take-6076748bc886 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodGovernance Attack
    Reported loss$ 2,173,500
  2. Incident date
    Attack methodRug Pull
    Reported loss$ 1,300,000
  3. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 41,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000