Tornado Cash suffers backend attack, user deposits at risk

Tornado Cash has suffered a backend attack with a vulnerability that can steal deposit data and funds, putting user deposits at risk, as reported by CoinDesk. As per a Medium post by community member Gas404, malicious javascript code was hidden in a governance proposal submitted by a so-called Tornado Cash developer two months prior to January 1st. The code redirected deposit data to a public server hosted by the same developer, resulting in one deposit being stolen.

Tornado Cash

Comments

All Comments

Recommended for you

Cointime精选 ·

‘We’re just scratching the surface’ of crypto and AI — Microsoft exec

The symbiotic relationship between AI and crypto is still in its nascent stages, according to tech execs.
Cointime精选 ·

Big miners pose a growing existential threat to Bitcoin

As of May, AntPool and Foundry USA controlled more than 50% of Bitcoin's hash rate. That could become a problem for Bitcoin users in the near future.
Cointime精选 ·

Bybit’s Notcoin listing debacle, China firm’s profits up 12-fold after crypto buy: Asia Express

Bybit CEO apologises for Notcoin listing woes, Hong Kong crypto ETFs dissapoint, China firm's profits surge 1100% after crypto buy
Cointime精选 ·

Is onboarding too hard? Crypto adoption still faces major obstacles

Progress has been made in streamlining the Web3 onboarding process, but the flood of mainstream users has not yet arrived.
Cointime精选 ·

What the DOJ’s First MEV Lawsuit Means for Ethereum

In a highly technical overview of an exploit that has since been patched, government prosecutors find that exploiting code is a crime. CoinDesk reached out to several experts in the Ethereum community to get their views on the case.
Optimism 2024 Q1 Report: The implementation of EIP-4844 reduces L1 submission costs by 99%

Optimism has released its Q1 2024 report, which shows that the number of daily active addresses has reached 89,000 (a 23% increase compared to the previous period), and the daily transaction volume has increased to 470,000 (a 39% increase compared to the previous period). These indicators are slightly lower than the historical high point in Q3 2023.
LocalMonero to Shut Down in Six Months Amid Regulatory Pressure and Internal Factors

LocalMonero, a peer-to-peer exchange for trading privacy coin Monero (XMR), has disabled all trades and will be taken down in six months, according to parent company AgoraDesk. The company cited a combination of internal and external factors for the decision, but did not provide specifics. The move follows a trend of P2P crypto trading platforms shutting down due to regulatory challenges, including LocalBitcoins and Paxful. LocalMonero's closure also comes amid pressure from regulatory authorities on privacy coins, with exchanges including Binance and Coinbase delisting tokens like Monero and Zcash.
Morgan Stanley disclosed that it invested nearly $270 million in Grayscale GBTC, becoming one of the largest holders

On May 16th, Morgan Stanley disclosed in its Q1 13F filing with the SEC that it had invested $269.9 million in the Grayscale Bitcoin Trust (GBTC) to gain exposure to physical bitcoin ETFs. According to Fintel's data, this investment made it one of the largest holders of GBTC, after Susquehanna International Group (which invested $1 billion). Morgan Stanley is also one of many global systemically important banks (G-SIBs) that have disclosed investments in physical bitcoin ETFs, including Royal Bank of Canada, JPMorgan Chase, Wells Fargo, BNP Paribas, and UBS Group.
Coinbase Plans to Target Australia's Self-Managed Pensions Sector with New Service

Coinbase is developing a service that will target Australia's self-managed pensions sector, according to the exchange's Asia-Pacific Managing Director John O'Loghlen. The move comes as self-managed funds in Australia have increasingly held crypto, with nearly A$1 billion ($664 million) allocated to crypto as of the latest data from the Australian Taxation Office. O'Loghlen stated that Coinbase's offering will aim to service these clients on a one-off basis and retain their business. The interest in crypto within the self-managed pensions sector may be driven by the recent momentum gained after spot-ETF approvals in the U.S. and the possibility of similar approvals in Australia this year.
Huobi HK’s application for a Hong Kong virtual asset trading platform license was withdrawn on May 14

On May 15th, according to updated data on the official website of the Hong Kong Securities and Futures Commission, Huobi HK's application for a virtual asset trading platform license submitted to the Hong Kong Securities and Futures Commission was withdrawn on May 14th.