Suspicious governance proposal puts $23M in Tornado Cash tokens at risk

A governance proposal submitted to the Tornado Cash (TORN) protocol is suspected of containing malicious code, potentially putting $23 million worth of the token at risk of theft. Blockchain security researcher Sergey Shemyakov reported the finding via X, urging the community to exercise caution before voting.

Unverified code and privacy tool funding raise red flags

Shemyakov noted that the proposal’s contract code remains unverified, a significant departure from standard practice in decentralized autonomous organization (DAO) governance. Typically, proposal code is publicly auditable to ensure transparency. Additionally, the proposer received initial funding through Railgun, a privacy-focused tool that obscures transaction histories, making it difficult to trace the source of funds.

The researcher explained that the proposal is structured in a way that could allow the proposer to seize control of the DAO’s governance mechanisms. While the Tornado Cash mixing pool itself remains safe, the attack appears to be aimed directly at the protocol’s governance layer, potentially enabling the theft of TORN tokens held in the DAO treasury.

Implications for DAO security and user funds

This incident highlights a growing vulnerability in decentralized governance systems. Malicious actors can exploit the often-complex proposal process to insert hidden code that, if approved, grants them administrative control. For Tornado Cash, which has already faced significant regulatory and technical challenges, this represents another threat to its operational integrity.

What users should know

The immediate risk is limited to the DAO treasury, not the mixing pools or user funds. However, if the proposal were to pass, the attacker could drain the treasury of its TORN tokens. The community is advised to reject the proposal and for the DAO to implement more rigorous code verification processes before any vote.

Conclusion

The discovery of a potentially malicious governance proposal underscores the importance of security diligence in decentralized finance. As DAOs become more common, so do targeted attacks on their governance structures. The Tornado Cash community must act swiftly to neutralize this threat and reinforce its security protocols to prevent future incidents.

FAQs

Q1: Is my Tornado Cash mixing pool safe?
Yes, the mixing pool itself is not affected. The risk is limited to the DAO treasury and governance tokens.

Q2: How can the community stop this attack?
By voting against the malicious proposal and implementing stricter code verification before any future votes.

Q3: What makes this proposal suspicious?
The contract code is unverified, and the proposer funded their address through a privacy tool, making it difficult to identify them.