The attackers who recently hacked the Tornado Cash project offered to return control of the project to the cryptocurrency community.
The information was made public by user Tornadosaurus-Hex on the Tornado Cash community forum.
According to Tornadosaurus-Hex, hackers who accessed the system may have already begun the process of zeroing in on fraudulently obtained votes.
Tornadosaurus-Hex admitted that the Tornado Cash community is practically powerless in this situation, since hackers took control of the project as a result of a previous attack.
It is noted that the new proposal to update the cryptocurrency mixer does not provide any security guarantees.
On May 20, attackers embezzled 1.2 million votes by embedding a malicious app. It activates the EmergencyStop function, which changes the logic of the control contract.
Having gained full control of the protocol, a hacker can revoke all blocked votes, remove tokens from the control contract and block the router.
The attackers have already withdrawn 10,000 votes as TORN tokens and liquidated them.
In August 2022, the U.S. Treasury Department put Tornado Cash on a sanctions list, saying the service was used by North Korean hackers to launder illegally obtained funds.
In April, it became known that cryptomixer developer Alexei Pertsev may be placed under house arrest pending the outcome of the investigation.