A Tornado Cash-funded attacker registered the ENS name "autonolas-deployer.eth" and submitted a malicious governance proposal to the Autonolas project, according to Defimon. The proposal, titled "Owner migration: transfer treasury ownership from old timelock to Safe updater," would move treasury ownership from the legitimate Autonolas Timelock to an attacker-controlled contract, allowing the attacker to withdraw 40.196 ETH, roughly $100K. The community has roughly three days to defeat the proposal. Defimon shared the alert in the project's community chat, and the Autonolas team is aware and plans to vote the proposal down once voting opens.

AI summary of the linked source β€” not editorial content.

Explore the topic

Loading related coverage…

Comments

Loading comments…