Tornado Cash’s TORN Token Up 10% as Attacker Submits Proposal to Undo Attack

The proposal would revert Tornado Cash’s governance back to token holders, but not everyone in the community agrees that it's a benevolent plan.

AccessTimeIconMay 22, 2023 at 3:34 a.m. UTC
Updated May 22, 2023 at 7:24 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

The Tornado Cash token (TORN) is up 10% after a proposal submitted by a wallet address linked to a recent attack on the decentralized autonomous organization’s (DAO) governance state looks to reverse the malicious changes.

“The attacker posted a new proposal to restore the state of governance," user Tornadosaurus-Hex wrote in the Tornado Cash community forum, adding that there is a "good chance" that the attacker would execute it.

Tornadosaurus-Hex said that the attacker is reverting the TORN tokens they gave themself – which gave them a controlling share of the governance votes – back to zero.

Given the attacker's holdings of TORN governance tokens, the proposal looks as though it will pass when voting closes on May 26, though it's unclear when the action will be executed. When the proposal passes, the malicious code that the attacker integrated into the protocol, which allowed them to steal voting power from others, will be removed, and the governance of Tornado Cash's DAO will go back to token holders.

As a result, TORN was up as much as 10%, according to CoinGecko data, before settling back down.

0xdeadf4ce, an active member of the TORN community, pointed out that this might all be a “gigatroll” to depress the price of the token to increase their holdings at a discount.

“We don’t even have a choice in regards to this proposal, but it is still important nonetheless,” Tornadosaurus-Hex added.

Structural attacks on DAOs and DeFi protocols, which differ from hacks where the attacker breaks code instead of exploiting it, have resulted in charges, but the attacker behind this exploit is likely counting on the fact that Tornado Cash was recently designated as a sanctioned entity.

Edited by Rosie Perper.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.