Tornado Cash exploiter moves ETH, TORN tokens

Quick Take

  • The Tornado Cash DAO exploiter conducted a pair of transactions on Wednesday.
  • The transactions were in ETH and TORN, the latter of which is the governance DAO token for Tornado Cash. 

The attacker who exploited mixing service Tornado Cash's DAO has conducted a series of transactions, the first since the governance takeover last weekend.

Per EtherScan, two transactions were conducted roughly an hour and a half before press time. One transaction of 100 ETH was sent to the Tornado Cash Router, which is used in the service's funds-obfuscating process. The other transaction comprised 38,302.57 TORN, which is the governance token for the DAO. 

As previously reported by The Block, the exploiter took over the DAO following the passage of a malicious governance proposal this weekend. The pseudonymous security researcher Samczsun had reported that the exploit gave the attacker governance control but that most funds held within the Tornado Cash are shielded from theft.


Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

Tornado Cash was sanctioned by the U.S. government last year for its use by cybercriminals, including North Korea's Lazarus group. In recent years, international law enforcement officials have targeted mixing services like Tornado Cash. 

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.


To contact the editor of this story:
Nathan Crooks at
[email protected]

More by Michael McSweeney