An analyst at investment firm Paradigm, using the Twitter pseudonym samczsun, reported that on May 20, someone misappropriated 1.2 million votes by introducing a malicious application.
It activates the EmergencyStop function to change the logic of the control contract.
Having gained full control of the protocol, a hacker can revoke all blocked votes, remove tokens from the control contract and block the router.
The attackers have already withdrawn 10,000 votes as TORN tokens and liquidated them;
Cybersecurity experts PeckShieldAlert reported that hackers have already moved 6,000 TORNs to the Bitrue platform and converted 380 000 TORNs into ethers, converting 372 ETH into Tornado Cash.
https://help.twitter.com/en/twitter-for-websites-ads-info-and-privacy
The Tornado Cash team is actively seeking Solidity developers to help protect the protocol from further loss.
Interaction with the Binance cryptocurrency, which has more tokens in its possession than the attackers, plays a major role in this.
This advantage can be used to undo functions implemented through an exploit, according to representatives of Tornado Cash.
Shortly after the news of the exploit, Binance management announced a temporary suspension of deposits from TORN.
https://help.twitter.com/en/twitter-for-websites-ads-info-and-privacy
In August 2022, the U.S. Treasury Department put Tornado Cash on a sanctions list, saying the service was used by North Korean hackers to launder illegally obtained funds.
In April it became known that cryptomixer developer Alexei Pertsev could be placed under house arrest pending the completion of the investigation.