Attacker hijacks Tornado Cash governance via malicious proposal

On May 20 at 3:25 ET, an enemy effectively granted 1.2 million votes to a destructive proposition. Offered that the proposition received more than 700,000 legitimate votes, the attacker got overall control over Tornado Cash governance.On 2023/05/20 at 07:25:11 UTC, Tornado Cash governance successfully ceased to exist. As discussed by @samczsun:” Once the proposition was passed by voters, the assaulter simply used the emergencyStop function to upgrade the proposition reasoning to grant themselves the phony votes.

On May 20 at 3:25 ET, an attacker effectively given 1.2 million votes to a destructive proposal. Offered that the proposition got more than 700,000 legitimate votes, the assaulter gained overall control over Tornado Cash governance.On 2023/05/20 at 07:25:11 UTC, Tornado Cash governance successfully stopped to exist. As described by @samczsun:” Once the proposition was passed by voters, the opponent just utilized the emergencyStop function to upgrade the proposition reasoning to approve themselves the fake votes.