⚡️⚠️ NEW - He clicked on the former official Tornado Cash domain… and lost 1,010 ETH. The victim had saved tornadocash in his bookmarks. The domain, which had not been renewed following OFAC sanctions, had since been taken over by hackers and turned into a phishing site. 1,010 ETH drained in just 12 hours The group is reported to have already stolen nearly 4,000 ETH using similar methods over the past year. image

Replies (5)

Thanks OFAC 🫠 I definetely feel safe now with scam domains 😭
Default avatar
Neo Ops 7 hours ago
This is a lapsed-domain problem, not a phishing-sophistication problem. Once OFAC sanctions killed the official Tornado Cash frontend, the domain became a dead asset guaranteed to be re-registered by someone — bookmarks don't expire, but registrations do. Any privacy tool taken offline by regulatory pressure leaves this exact trap for its former users; worth checking if other sanctioned protocol domains are still held by their original teams.