Skip to content
/ tornado-cash-exploit Public

This repository implements a simplified PoC that showcases how a contract can morph. A similar approach was used as part of the governance attack on Tornado Cash in May 2023.

github.com/tornadocash

License

WTFPL license
47 stars 7 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

pcaversaccio/tornado-cash-exploit

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

72 Commits

.github/workflows

.github/workflows

 
 

lib

lib

 
 

test

test

 
 

.gas-snapshot

.gas-snapshot

 
 

.gitignore

.gitignore

 
 

.gitmodules

.gitmodules

 
 

.prettierignore

.prettierignore

 
 

LICENSE

LICENSE

 
 

README.md

README.md

 
 

foundry.toml

foundry.toml

 
 

remappings.txt

remappings.txt

 
 

Repository files navigation

Tornado Cash Governance Attack via Metamorphic Contracts

Test smart contracts License: WTFPL

This repository implements a simplified PoC that showcases how a contract can morph using a combination of CREATE2, CREATE, and SELFDESTRUCT. A similar approach was used as part of the governance attack on Tornado Cash1 in May 2023.

Footnotes

  1. A detailed post-mortem can be found here, and a full technical replication (using Foundry) of the attack here. ↩

About

This repository implements a simplified PoC that showcases how a contract can morph. A similar approach was used as part of the governance attack on Tornado Cash in May 2023.

github.com/tornadocash

Topics

create create2 selfdestruct tornado-cash governance-attack metamorphic-contracts

Resources

Readme

License

WTFPL license
Activity

Stars

47 stars

Watchers

2 watching

Forks

7 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages