Tornado Cash has suffered a governance attack, and the attacker has extracted and sold about 10,000 TORN

ChainCatcher news, Paradigm researcher Samczsun tweeted that on May 20, 2023, at 15:25, Tornado Cash encountered a governance attack, where the attacker granted themselves 1.2 million voting rights through a malicious proposal, surpassing approximately 700,000 legitimate votes, thus gaining governance control.

This means that the attacker can: revoke all locked votes; deplete all tokens in the governance contract; disable the router. However, the attacker still cannot deplete individual liquidity pools.

It is reported that as of now, the attacker has extracted and sold about 10,000 TORN. (source link)