Web3 is going just great [English] - Tornado Cash DAO suffers hostile takeover
- 30 mai -

A proposal ostensibly to penalize cheating network participants in the Tornado Cash crypto tumbler project successfully passed by DAO vote. However, the proposer had added an extra function, which they subsequently used to obtain 1.2 million votes. Now that they have more than the ~700,000 legitimate Tornado Cash votes, they have full control of the project.
The attacker has already drained locked votes and sold some of the $TORN tokens, which are governance tokens that both entitle the holder to a vote but also were being traded for $5–$7 around the time of the attack. The attacker has since tumbled 360 ETH (~$655,300) through Tornado Cash to obscure its final destination. Meanwhile, $TORN plummeted in value more than 30% as the attacker dumped the tokens.
The attacker now has full control over the DAO, which according to crypto security researcher Sam Sun grants them the ability to withdraw all of the locked votes (as they did), drain all of the tokens in the governance contract, and "brick" (make permanently non-functional) the router.
par Molly White
Web3 is going just great [English]
A timeline recording only some of the many disasters happening in crypto, decentralized finance, NFTs, and other blockchain-based projects.
Atomic Wallet hacks total over $35 millionMultiple users of the Atomic Wallet software suffered wallet compromises totaling more than $35 million in a spate of hacks suggesting an issue (...)
Scammers capitalize on Binance lawsuit fears to pull off Discord phishing scam
Adding insult to injury in Binance's tough couple of days, someone has managed to hijack the Discord vanity URL used by BNB Chain, the blockchain (...)
SEC files complaint against Coinbase
The SEC has clearly been busy. The agency followed up its complaint against Binance by smacking Coinbase with charges the very next day. This (...)
SEC files complaint against Binance
The SEC has filed a complaint against Binance, various related companies, and Binance CEO Changpeng "CZ" Zhao. They allege that the company has (...)
unshETH compromised after private key leaked to GitHub
After a developer leaked private keys to GitHub, someone used them to drain $375,000 from the unshETH defi project. The project emergency paused (...)