Security incident · 2023-05-20
Tornado Cash
According to the public DefiLlama incident dataset, Tornado Cash (Ethereum) suffered a security incident on 2023-05-20, with about $2.2M reported lost.
| Date | 2023-05-20 |
|---|---|
| Reported loss | $2.2M |
| Chain | Ethereum |
| Target type | DAO |
| Technique class | Governance |
| Technique | Malicious Proposal |
| Bridge incident | No |
| Within 2023 | #55 by loss that year, 0.1% of all reported losses that year |
How this kind of attack works
The attacker briefly gained enough voting power to pass a proposal that sent treasury funds to themselves.
Would a pre-payment check have helped
Governance attacks are countered by voting design and timelocks.
Other incidents with the same technique
- Beanstalk2022-04-17 · $181.0M
- BonkDAO2026-07-06 · $20.0M
- TermFinance Vaults2026-08-23 · $8.5M
- TSD (True Seigniorage Dollar)2021-03-15 · $7.1M
- Audius2022-07-25 · $6.0M
- Astroport2026-09-22 · $4.9M