Tornado Cash Funds Fuel Governance Takeover on Ethereum

Tornado Cash, an Ethereum mixer that has faced regulatory scrutiny in the past, has been linked to a high-profile governance takeover of a small Ethereum-based protocol called TOP. On June 9, 2026, an attacker withdrew approximately $2.7 million in ETH from Tornado Cash pools and used it to gain controlling interest in TOP.

The perpetrator minted additional tokens and offloaded them on decentralized exchanges, netting around $1.6 million in profits. This marks a textbook example of a governance-layer attack enabled by mixer-derived capital.

TOP operates with a limited total supply of 16,384 tokens and uses an Aragon DAO for governance, where voting power aligns directly with token holdings. The attacker capitalized on this design by purchasing enough tokens to dominate votes, proposing and enacting a minting action in their favor, then swapping the new supply for profit in a Balancer liquidity pool.

Tornado Cash's use case as an Ethereum mixer has been controversial, having handled over $7 billion in deposits by mid-2022. Its market dominance in crypto mixing reached nearly 59% in Q2 2022. The US Treasury’s OFAC placed Tornado Cash on its SDN list in August 2022, citing its role in laundering illicit proceeds.