# Tornado Cash · Drain Watch

6 incidents, 1 live. JSON: https://drains.watch/t/tornado-cash.json · RSS: https://drains.watch/t/tornado-cash/feed.xml

- [Dormant PancakeSwap LP loses $2.96M after signing a malicious EIP-7702 authorization](https://drains.watch/i/eip-7702-pancakeswap-lp-2-96m-jul-2026) (closed, Critical, Contained, since Jul 23, 2026)
- [Drift Protocol drained of $270M+ after signers pre-signed durable-nonce admin transactions](https://drains.watch/i/drift-protocol-durable-nonce-admin-takeover-apr-2026) (live, Critical, Contained, since Apr 1, 2026)
- [Investor sends 4,556 ETH ($12.25M) to a poisoned lookalike address planted months earlier](https://drains.watch/i/address-poisoning-4556-eth-jan-2026) (closed, Critical, Still active, since Jan 30, 2026)
- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Trader loses nearly $50M in USDT to address poisoning after copying a lookalike address from history](https://drains.watch/i/address-poisoning-50m-usdt-dec-2025) (closed, Critical, Still active, since Dec 20, 2025)
- [Whale's 1-of-1 Safe multisig drained of $27M+ after key compromise, ETH laundered via Tornado Cash](https://drains.watch/i/whale-safe-1of1-key-compromise-nov-2025) (closed, Critical, Still active, since Nov 4, 2025)