A bad old link in a bookmark caused someone to lose 1,010 ETH.
Users of Tornado Cash who opened an old official website address from their bookmarks found a page that looked exactly like the real one and deposited funds as usual. As a result, all 1,010 ETH was withdrawn within 12 hours.
After the old domain tornado.cash expired, the team couldn’t renew it due to OFAC sanctions. After a phisher snatched the domain, they set up a fake frontend.
On-chain records show the funds were still transferred to the hacker’s address. Over the past 12 months, the group may have already stolen nearly 4,000 ETH using similar methods.
Users of Tornado Cash who opened an old official website address from their bookmarks found a page that looked exactly like the real one and deposited funds as usual. As a result, all 1,010 ETH was withdrawn within 12 hours.
After the old domain tornado.cash expired, the team couldn’t renew it due to OFAC sanctions. After a phisher snatched the domain, they set up a fake frontend.
On-chain records show the funds were still transferred to the hacker’s address. Over the past 12 months, the group may have already stolen nearly 4,000 ETH using similar methods.