Backdoor has been discovered in the Tornado Cash interface to intercept deposit data
According to community representatives, it has been functioning for two months
26.02.2024 - 08:27
214
3 min
0
What’s new? Yu Xian, the founder of SlowMist, an audited blockchain company, has reported an exploit of the interface of the crypto mixer Tornado Cash, which is included in the US sanctions list. Thus, according to anonymous blockchain developers cited by Xian, a backdoor capable of intercepting certificates of deposit has been functioning in the IPFS version of the service’s frontend for two months.
What else is known? According to Xian, the malicious mechanism was introduced through a voting-based attack on Tornado Cash’s decentralized autonomous organization (DAO) governance mechanism. At risk are the funds of users who made deposits into the mixer using IPFS over the past two months.
According to the community, malicious code was covertly injected into a management proposal made two months ago by a developer under the nickname Butterfly Effects. Since January 1, Tornado Cash deposit records have been leaking to a private malicious server under his control. At least one case of a mixer user’s deposit being stolen in ETH coins has been identified.
GoFundMe has stopped a fundraiser to support Tornado Cash’s founders
All contributions were returned to the sponsors
Earlier, the Cyber Security Agency of Singapore discovered a vulnerability in the WordPress cryptocurrency widget “Cryptocurrency Widgets — Price Ticker & Coins List Plugin” versions 2.0-2.6.5, which could leak sensitive information. Attackers can add SQL queries to extract it from the database.
Late last year, hardware crypto wallet maker Ledger reported that users lost $600 000 due to a vulnerability in its blind signature mechanism. The company pledged to reimburse the losses and replace the mechanism of interaction with DApps with a fully transparent one by June 2024.
Useful material?
Telegram 
Twitter Market
The company’s unrealized profits from investing in its first cryptocurrency approached $14 billion
Nov 19, 2024
Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Market
The product will begin trading on the Swiss Exchange on November 19
Nov 12, 2024
Market
The company’s unrealized profits from investing in the first cryptocurrency approached $13 billion
Nov 12, 2024
Market
The company predicts that the rate of the first cryptocurrency will grow to $200 000 by the end of next year
Nov 11, 2024
Cryptocurrency rates
-
Bitcoin
$98 837
BTC
+0.88%
-
Ethereum
$3 349.31
ETH
+2.51%
-
BNB Smart Chain
$579.4
BSC
+1.23%
-
Ripple
$1.48
XRP
+31.73%
-
Dogecoin
$0.394541
DOGE
+1.36%
-
Cardano
$0.909626
ADA
+14.44%
-
Bitcoin Cash
$489.42
BCH
-4.32%
-
Stellar XLM
$0.300324
XLM
+25.61%
-
Polkadot
$6.19
DOT
+5.06%
-
Litecoin
$91.46
LTC
+0.88%