Tornado Cash hacker moved part of the stolen tokens

The attacker who hacked the Tornado Cash cryptomixer made a series of transactions after capturing the protocol.

According to the data Etherscanthe hacker transferred 100 ETH (~$178,000 at the time of writing) to Tornado Cash Router, which is used in the process of “mixing” cryptocurrencies.

The second transaction included 38,302.57 TORN (~$164,000) — cryptomixer DAO control tokens. The hacker brought these assets to an unidentified address.

On May 20, an unknown person seized control of the Tornado Cash control mechanism. According to a Paradigm analyst, the hacker introduced a malicious proposal, the code of which provided the ability to call the function emergency stop to update logic after acceptance. With its help, the cracker gained control over 1.2 million votes.

The attacker was able to revoke blocked tokens, transfer assets to the managing smart contract, and stop the router.

PeckShield experts noted that the hacker has already exchanged most of the withdrawn tokens for Ethereum and sent the cryptocurrency to the Tornado Cash address and the Bitrue platform.

According to EmberCN, the attacker withdrew 483,000 TORN from the Tornado Governance vault in total.

The cracker later published a proposal that would potentially return control of the project to the DAO. According to him, the initiative is not “malicious” and involves the removal of malicious code, with which he gained control of the protocol.

Recall that in November 2022, the US Treasury Department’s Office of Foreign Assets Control updated sanctions against Tornado Cash, citing its role in financing North Korea’s nuclear program.

The attacker who hacked the Tornado Cash cryptomixer made a series of transactions after capturing the protocol.

According to the data Etherscanthe hacker transferred 100 ETH (~$178,000 at the time of writing) to Tornado Cash Router, which is used in the process of “mixing” cryptocurrencies.

The second transaction included 38,302.57 TORN (~$164,000) — cryptomixer DAO control tokens. The hacker brought these assets to an unidentified address.

On May 20, an unknown person seized control of the Tornado Cash control mechanism. According to a Paradigm analyst, the hacker introduced a malicious proposal, the code of which provided the ability to call the function emergency stop to update logic after acceptance. With its help, the cracker gained control over 1.2 million votes.

The attacker was able to revoke blocked tokens, transfer assets to the managing smart contract, and stop the router.

PeckShield experts noted that the hacker has already exchanged most of the withdrawn tokens for Ethereum and sent the cryptocurrency to the Tornado Cash address and the Bitrue platform.

According to EmberCN, the attacker withdrew 483,000 TORN from the Tornado Governance vault in total.

The cracker later published a proposal that would potentially return control of the project to the DAO. According to him, the initiative is not “malicious” and involves the removal of malicious code, with which he gained control of the protocol.

Recall that in November 2022, the US Treasury Department’s Office of Foreign Assets Control updated sanctions against Tornado Cash, citing its role in financing North Korea’s nuclear program.