Dear community members.
The community passed Proposal No. 10, Relayer registry, on February 19, 2022.
After a month of operation, as a relayer, we have noticed some problems as follows, and look forward to improvements in next update, which will help to guarantee the security and stability of all relayers and improve the user experience.
- Relayer URL + /v1/tornadoWithdraw and Relayer URL + /relay is easy to be used for CC attacks.
- Relayer can not modify the DNS domain name in the dashboard of Tornado Cash UI.
- Relayer URL can be maliciously submitted as phishing sites and put into malicious site iframes causing relayer URL to be intercepted by browsers