Tornado Cash funds ‘at risk’ after hacker injects malicious code
Deposits to notorious crypto privacy tool (and hacker-favorite) Tornado Cash may be at risk after malicious code was reportedly introduced to certain user interfaces. According to a report by ZeroTwoDAO, published on Sunday: “If you have deposited to Tornado Cash using IPFS gateways (like ipfs.io, cf-ipfs.com, eth.link), your note would likely be exposed and the deposited funds are at risk.” It looks like some Tornado Cash UIs (eg https://t.co/JlgMXo60xT) inject malicious code for 100 ETH deposits. Also, there are some suspicious proposals: – https://t.co/dgB7tQHThS – https://t.co/N147u0WTMW Investigation ongoing. pic.twitter.com/80ZqgdMCSJ — sudo rm -rf –no-preserve-root / (@pcaversaccio) February 24, 2024 Read more: DeFi has rough weekend with Aave and Tornado Cash chaos The report goes on to explain that user interfaces hosted via the peer-to-peer Interplanetary File System (IPFS) contain ‘ malicious javascript code’ that was...