Attacker uses malicious proposal to take over Tornado Cash governance
An attacker managed to get a malicious proposal passed by the Tornado Cash DAO, one that handed them complete control over its governance system.
Tornado Cash is the crypto mixing service that runs on Ethereum and was sanctioned by the U.S. Treasury. Its governance system controls upgrades to the protocol and is run by those holding the project’s native TORN tokens.