Tornado Cash Phishing Attack Drains 1,010 ETH Through Expired Domain

TLDR: A malicious Tornado Cash frontend captured withdrawal notes and enabled attackers to drain 1,010 ETH from one user. Attackers allegedly stole nearly 4,000 ETH through similar expired-domain phishing operations during the previous 12 months. On-chain data traced 73 BTC through Whirlpool before part of the funds moved to Ethereum and Tornado Cash. The incident [...]

The post Tornado Cash Phishing Attack Drains 1,010 ETH Through Expired Domain appeared first on Blockonomi.