Greboca  

Web3 is going just great [English]  -  Tornado Cash DAO suffers hostile takeover

 -  30 mai - 

A turquoise tornado shape, followed by the text "tornado" in lowercase

A proposal ostensibly to penalize cheating network participants in the Tornado Cash crypto tumbler project successfully passed by DAO vote. However, the proposer had added an extra function, which they subsequently used to obtain 1.2 million votes. Now that they have more than the ~700,000 legitimate Tornado Cash votes, they have full control of the project.

The attacker has already drained locked votes and sold some of the $TORN tokens, which are governance tokens that both entitle the holder to a vote but also were being traded for $5–$7 around the time of the attack. The attacker has since tumbled 360 ETH (~$655,300) through Tornado Cash to obscure its final destination. Meanwhile, $TORN plummeted in value more than 30% as the attacker dumped the tokens.

The attacker now has full control over the DAO, which according to crypto security researcher Sam Sun grants them the ability to withdraw all of the locked votes (as they did), drain all of the tokens in the governance contract, and "brick" (make permanently non-functional) the router.

par Molly White

Web3 is going just great [English]

A timeline recording only some of the many disasters happening in crypto, decentralized finance, NFTs, and other blockchain-based projects.

Atomic Wallet hacks total over $35 million

 -  7 juin - 

Multiple users of the Atomic Wallet software suffered wallet compromises totaling more than $35 million in a spate of hacks suggesting an issue (...)


Scammers capitalize on Binance lawsuit fears to pull off Discord phishing scam

 -  6 juin - 

Adding insult to injury in Binance's tough couple of days, someone has managed to hijack the Discord vanity URL used by BNB Chain, the blockchain (...)


SEC files complaint against Coinbase

 -  6 juin - 

The SEC has clearly been busy. The agency followed up its complaint against Binance by smacking Coinbase with charges the very next day. This (...)


SEC files complaint against Binance

 -  6 juin - 

The SEC has filed a complaint against Binance, various related companies, and Binance CEO Changpeng "CZ" Zhao. They allege that the company has (...)


unshETH compromised after private key leaked to GitHub

 -  2 juin - 

After a developer leaked private keys to GitHub, someone used them to drain $375,000 from the unshETH defi project. The project emergency paused (...)