According to Planet Daily, SlowMist founder Yu Xian posted on the X platform that the front end of the IPFS version of Tornado Cash has backdoor code that hijacks deposit certificates. This malicious code has been in the market for nearly two months, and some attackers' mixed currency funds may have been hacked. Cosine notes that this issue is caused by governance attacks that allow malicious proposals to slip through unnoticed.