DeFi Protocol Suffers $3.9M Exploit Routed via Tornado Cash
Unleash Protocol hit by $3.9 million exploit with funds routed through Tornado Cash
Unleash Protocol, an intellectual property platform built on Story Protocol, has suffered an exploit that resulted in roughly $3.9 million in losses, according to the information provided.
The incident was attributed to a governance failure at Unleash. As described, the issue allowed an attacker to obtain unauthorized control, enabling the withdrawal of assets from the protocol.
After extracting the funds, the attacker transferred the stolen assets to Ethereum and then used Tornado Cash to obscure transaction history. Tornado Cash is a privacy tool commonly referred to as a mixer, designed to make it harder to trace funds on public blockchains.
The episode highlights how governance mechanisms—often used to manage permissions and administrative control in decentralized systems—can become a critical security risk when misconfigured or compromised. It also underscores the ongoing challenge of tracking and recovering funds once they are moved through privacy tools after an exploit.
