Exploring Tornado Cash In-Depth to Reveal Malleability Attacks in ZKP Projects