Starting the week with our testnet🔥😎
This is only the beginning of our journey. We have exciting developments on our roadmap that we’re integrating into the privacy layer.
Try it out: https://t.co/zcPD1j4I66
— Portal Gate (@portalgateme)
May 14, 2023
This is only the beginning of our journey. We have exciting developments on our roadmap that we’re integrating into the privacy layer.
Try it out: https://t.co/zcPD1j4I66
— Portal Gate (@portalgateme)
May 14, 2023
If you have tried our testnet already, then you must know that users need to wrap their assets into kycAssets. Why do you need to do that?
Here's the beginning of our series of short educational videos about Portal Gate:
https://t.co/CEQPVSqne4
— Portal Gate (@portalgateme)
May 16, 2023
Here's the beginning of our series of short educational videos about Portal Gate:
https://t.co/CEQPVSqne4
— Portal Gate (@portalgateme)
May 16, 2023
YouTube
Why does Portal Gate wrap tokens?
Learn more about the underlying reasons why Portal Gate users need to wrap assets into kycAssets to use our platform.
❤1
Immutable records mean data can't be deleted.
Transparency means data is accessible to unknown actors.
Decentralization makes accountability a challenge.
— Portal Gate (@portalgateme)
May 18, 2023
Transparency means data is accessible to unknown actors.
Decentralization makes accountability a challenge.
— Portal Gate (@portalgateme)
May 18, 2023
Twitter
Immutable records mean data can't be deleted.
Transparency means data is accessible to unknown actors.
Decentralization makes accountability a challenge.
Transparency means data is accessible to unknown actors.
Decentralization makes accountability a challenge.
Portal Gate offers a privacy solution that combines on-chain and off-chain data to solve this paradox.
— Portal Gate (@portalgateme)
May 18, 2023
— Portal Gate (@portalgateme)
May 18, 2023
Twitter
Portal Gate offers a privacy solution that combines on-chain and off-chain data to solve this paradox.
Have thousands of allowance to revoke on @RevokeCash? How about just moving all your assets to a fresh new wallet anonymously with Portal Gate?
— Portal Gate (@portalgateme)
May 19, 2023
— Portal Gate (@portalgateme)
May 19, 2023
Twitter
Have thousands of allowance to revoke on @RevokeCash? How about just moving all your assets to a fresh new wallet anonymously with Portal Gate?
1/ Planned and malicious, @tornadocash’s governance pool was exploited via the SELFDESTRUCT and CREATE2 arbitrary code execution.
Missed the whole $TORN weekend story? Here’s a summary thread of what happened:
— Portal Gate (@portalgateme)
May 22, 2023
Missed the whole $TORN weekend story? Here’s a summary thread of what happened:
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
1/ Planned and malicious, @tornadocash’s governance pool was exploited via the SELFDESTRUCT and CREATE2 arbitrary code execution.
Missed the whole $TORN weekend story? Here’s a summary thread of what happened:
Missed the whole $TORN weekend story? Here’s a summary thread of what happened:
2/ The black-hat exploiter began with a seemingly legitimate proposal via the CREATE2 deterministic deployment a week prior to executing their malicious code after the SELFDESTRUCT function on TC governance.
https://t.co/Q0NbHKRNGi
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/Q0NbHKRNGi
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
The attacker waited for the legitimate proposal to pass before they called the self-destruct function: https://t.co/5I2eMDyCcp
Self-destruct was typically used in TornadoCash proposals to clean up the proposal contract after execution.
Self-destruct was typically used in TornadoCash proposals to clean up the proposal contract after execution.
3/ Thereafter, Tornado Cash’s on-chain governance effectively ceased to exist due to the overwhelming grant of 1.2M votes, taking control of the withdrawal, function, and overall function of the pool.
https://t.co/TEiDio9DDZ
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/TEiDio9DDZ
— Portal Gate (@portalgateme)
May 22, 2023
4/ This is evident with the immediate sale of the TORN token on the open market after they utilised the emergencyStop function to grant themselves fake votes.
I.https://t.co/zpBVfvupoO
II.https://t.co/Cd7jf4Opdr https://t.co/s9GqlzZO4m
— Portal Gate (@portalgateme)
May 22, 2023
I.https://t.co/zpBVfvupoO
II.https://t.co/Cd7jf4Opdr https://t.co/s9GqlzZO4m
— Portal Gate (@portalgateme)
May 22, 2023
openchain.xyz
Transaction Tracer
View and trace EVM transactions
5/ Tracing the transaction, approximately 10k $TORN has been compromised, with more potentially under the control of the black-hat exploiter.
https://t.co/iu32RNfpJv
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/iu32RNfpJv
— Portal Gate (@portalgateme)
May 22, 2023
openchain.xyz
Transaction Tracer
View and trace EVM transactions
6/ So far the exploit is limited to the control of TORN tokens within the governance pool - though researchers have reason to believe that the Classic Router is potentially compromised.
— Portal Gate (@portalgateme)
May 22, 2023
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
6/ So far the exploit is limited to the control of TORN tokens within the governance pool - though researchers have reason to believe that the Classic Router is potentially compromised.
7/ For anyone keen on seeing the bird’s eye view of what exactly happened, @blocksecteam tweeted an encompassing function map to understand the current situation for $TORN holders:
https://t.co/UWM0BCCDc8 https://t.co/euycTjnYmW
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/UWM0BCCDc8 https://t.co/euycTjnYmW
— Portal Gate (@portalgateme)
May 22, 2023
8/ Furthermore an in-depth transactional analysis by the wonderful team at @slowmist_team shows and confirms @blocksecteam’s findings:
https://t.co/aHi1MOjrAj
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/aHi1MOjrAj
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
Brief Analysis of TornadoCash Governance Exploit
On May 20, 2023, @TornadoCash suffered a governance attack, in which exploiters took control of the governance of TornadoCash by executing a malicious proposal.
Let's see how it happened:
Exploiters first…
On May 20, 2023, @TornadoCash suffered a governance attack, in which exploiters took control of the governance of TornadoCash by executing a malicious proposal.
Let's see how it happened:
Exploiters first…
9/ Tracking some notable addresses that the hacker could potentially control:
https://t.co/3FswPFJvkI
also highlighting this address:
https://t.co/3S6rTnU4Vi
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/3FswPFJvkI
also highlighting this address:
https://t.co/3S6rTnU4Vi
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
Tornado[.]Cash Governance Attack
We have identified some notable voter addresses.
Is it possible for the Tornado[.]Cash Governance Exploiter to have control over some addresses in them?
An voter address
https://t.co/4m77ts5E9x
We have identified some notable voter addresses.
Is it possible for the Tornado[.]Cash Governance Exploiter to have control over some addresses in them?
An voter address
https://t.co/4m77ts5E9x
10/ In addition, @samczsun highlighted a potential exploit on the #tornadocash Nova by proxy, effectively allowing the black-hat to DRAIN ALL $ETH in the pool via contract upgrades.
TORN Contract:
https://t.co/9vu6ISVmBc
— Portal Gate (@portalgateme)
May 22, 2023
TORN Contract:
https://t.co/9vu6ISVmBc
— Portal Gate (@portalgateme)
May 22, 2023
Gnosis Chain Blockchain Explorer
Contract Address 0xd692fd2d0b2fbd2e52cfa5b5b9424bc981c30696 | GnosisScan
The Contract Address 0xd692fd2d0b2fbd2e52cfa5b5b9424bc981c30696 page allows users to view the source code, transactions, balances, and analytics for the contract address. Users can also interact and make transactions to the contract directly on GnosisScan.
11/ So what now? Currently, the black-hat just proposed a new proposal, effectively attempting to “restore” confidence within the governance contract:
https://t.co/GdnhzypkqB
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/GdnhzypkqB
— Portal Gate (@portalgateme)
May 22, 2023
12/ Time will tell (proposal deadline as of 26/05/23 11:53PM GMT) whether governance will be restored, but one thing is for sure - Security is paramount.
— Portal Gate (@portalgateme)
May 22, 2023
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
12/ Time will tell (proposal deadline as of 26/05/23 11:53PM GMT) whether governance will be restored, but one thing is for sure - Security is paramount.
13/ As we’re building a compliant privacy solution at Portal Gate, to ensure that we will not experience the same exploit, our on-chain governance will potentially deviate from @tornadocash’s CREATE2 function.
https://t.co/NPhQfOGgui
— Portal Gate (@portalgateme)
May 22, 2023
https://t.co/NPhQfOGgui
— Portal Gate (@portalgateme)
May 22, 2023
14/ This also includes revisiting the requirement to separate ownership of the pool contract and governance contract, ensuring insulation of funds between Governance and TVL deposits.
Refer back to tweet 9/ from this thread.
— Portal Gate (@portalgateme)
May 22, 2023
Refer back to tweet 9/ from this thread.
— Portal Gate (@portalgateme)
May 22, 2023
Twitter
14/ This also includes revisiting the requirement to separate ownership of the pool contract and governance contract, ensuring insulation of funds between Governance and TVL deposits.
Refer back to tweet 9/ from this thread.
Refer back to tweet 9/ from this thread.
15/ To top it all off, we are rooting for the @tornadocash governance team and community as we build together for a better privacy-centric future.
Read more about Portal Gate’s two core product components:
https://t.co/CZqmwXrsfb
— Portal Gate (@portalgateme)
May 22, 2023
Read more about Portal Gate’s two core product components:
https://t.co/CZqmwXrsfb
— Portal Gate (@portalgateme)
May 22, 2023
Medium
Portal Gate’s Two Core Product Components
The use of blockchain technology has opened up new possibilities for financial transactions, but it has also created new challenges when it…