flash on Nostr: ⚡️⚠️ NEW - He clicked on the former official Tornado Cash domain… and lost ...
⚡️⚠️ NEW - He clicked on the former official Tornado Cash domain… and lost 1,010 ETH.
The victim had saved tornadocash in his bookmarks. The domain, which had not been renewed following OFAC sanctions, had since been taken over by hackers and turned into a phishing site.
1,010 ETH drained in just 12 hours
The group is reported to have already stolen nearly 4,000 ETH using similar methods over the past year.
Published at
2026-08-20 12:34:25 UTCEvent JSON
{
"id": "da5ab7428e634fd2f811368af6a6804f440d79289639d925d54b584c8abf93ee",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1787229265,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "⚡️⚠️ NEW - He clicked on the former official Tornado Cash domain… and lost 1,010 ETH.\n\nThe victim had saved tornadocash in his bookmarks. The domain, which had not been renewed following OFAC sanctions, had since been taken over by hackers and turned into a phishing site.\n\n1,010 ETH drained in just 12 hours\n\nThe group is reported to have already stolen nearly 4,000 ETH using similar methods over the past year. \nhttps://blossom.primal.net/4efa61cbd721ce85929c9339f28c890fd9bfceae64b84b89b9aa86f600e385ac.jpg",
"sig": "0ff7fcf40a70bedf4fb6e3e3f9dfce3e415ec04eb40780b36b16fee9395709dc6e9d9bf8b5e63f75dd1e56cef080f629dc28569aed4d70e0409a3868be002d93"
}
