MALICIOUS CODE FOUND IN TORNADO CASH GOVERNANCE PROPOSAL

Summary from the TLDR InfoSec newsletter

Tornado Cash enables users to make transactions on the Ethereum network without leaving a trace. However, it was recently discovered that a developer snuck a snippet of malicious code into a governance proposal on January 1st that funneled deposit notes to an attacker-controlled server. The exploit only affects transactions made through an IPFS gateway.