Tornado Cash DAO faces a suspicious governance proposal; researchers warn it may be an attack—or could be an attack—targeting a $23 million treasury

robot
Abstract generation in progress
Golden Finance reported that on June 26, blockchain security researcher Sergey Shemyakov issued a warning on June 25, stating that about 8 hours ago, a highly suspicious governance proposal appeared in the Tornado Cash DAO, calling for an independent community review.
The proposal contains multiple abnormal signals. First, the proposal's contract code has not been verified, which is extremely rare in the history of Tornado Cash DAO proposals. The researcher believes that this action itself constitutes a clear signal of a malicious proposal; second, the address of the proposal creator received funding through the privacy protocol Railgun 4 days ago, with a confused source and highly suspicious behavior; third, the content of the proposal description appears to be misleadingly packaged, but the core lies in its target contract—once the proposal is passed and executed, the governance contract will call the target contract function via delegatecall, meaning the attacker could gain extremely high permissions.
The researcher pointed out that the security of the Tornado Cash mixing pool itself is unaffected, but if the proposal is successfully passed, it is highly likely to constitute a direct attack on the Tornado Cash DAO itself. Currently, TORN tokens worth approximately $23 million stored in the DAO treasury are at risk. In 2022, the Tornado Cash DAO suffered a similar attack, where attackers successfully gained control of the protocol through a malicious governance proposal. The researcher urges all TORN token holders to remain highly vigilant before the proposal voting.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned