Tornado Cash recently fell victim to a sophisticated attack. This attack was executed through a deceptive contribution by a developer, who secretly embedded malicious JavaScript code within the project’s user interface. This code was designed to covertly capture and send users' private deposit notes to an unauthorized external server.

Checkmarx is a cybersecurity company specializing in static application security testing (SAST), software composition analysis (SCA), and other application security solutions. Through their blog, they offer insights, best practices, and news related to application security, vulnerability management, and secure software development lifecycle (SDLC). Developers and security professionals can learn about emerging threats, industry trends, and strategies for improving application security posture.

Checkmarx

The Tornado Cash open-source project was compromised through a supply chain attack, impacting users for months. Security researcher Gas404 discovered the compromise. This incident highlights the risks in decentralized finance and the importance of security audits and vigilance.

Tornado Cash Theft Uncovered