Fake Tornado Cash Website Promoting a Wallet Drainer

[albon]

What happened:: This member promoted a fake website impersonating the official Tornado Cash website, a well-known mixer. I checked the site's source code and confirmed that it contains wallet drainer functions designed to steal users' funds.

The WalletConnect metadata literally says Connect wallet to drain, and the wallet connection interface tells users: The wallet will sign the drain transactions.



Also, the drainAll() function reads users' ERC-20 token balances and creates transactions to send their entire balances to a fixed address.

Tornado Cash note → compliance report
ETH / DAI / USDC / USDT / WBTC — 0.1–100 ETH equivalent, no account

Short version

Note in, report out. No account, no email, no KYC, no logs. If you've ever had to explain where a withdrawal came from to somebody holding your funds, that's the part this fixes.

What this actually is

A Tornado Cash frontend. Deposits go to the pool contract, not to us — we never hold anything. You keep the note, the note is the money. The addition is a compliance report generator: paste the note, get a document tying that deposit to that withdrawal, the kind of paper a compliance desk or OTC broker reads instead of asking you to describe the source of funds in a chat box and hoping the clerk is in a good mood.

Pool depth at the 0.1 ETH denomination, as of writing: 374,263 deposits. It moves; check the site.

Assets and limits

ETH, DAI, USDC, USDT, WBTC. Minimum 0.1 ETH equivalent, maximum 100 ETH equivalent per transaction. More than that, split and queue.

Speeds

Standard / Fast / Instant. Gas is yours, faster costs more of it. Default is fine unless you're on a clock.

Wallets

MetaMask, OKX, Trust, Bitget, Coinbase Wallet, Phantom, Rabby, Ledger. Extension or QR.

What it's good for

• Breaking a balance into pool-sized chunks and consolidating afterwards — the destination field takes one address, everything lands there.
• Producing a paper trail that survives scrutiny without producing an identity.
• Stablecoin work where you'd rather the on/off ramp didn't see the rest of your wallet.
• Sweeping a wallet whose history you don't fully control — the receiving desk gets something to file.

What it isn't

Not a mixer with its own anonymity set. It borrows Tornado's, with everything that implies: relayer dependency, and a protocol with a sanctions history and a messy but improving exchange-acceptance record. Don't lose the note — nobody regenerates it for you. Don't reuse a round number you've used elsewhere.

FAQ

Custodial? No. Contract-level deposit, direct withdrawal.
Logs? Nothing kept past the session.
Fees? Relayer fee plus gas. Relayers set their own rate; it runs around 0.3% on the ETH pool and varies.
Sanctioned? The protocol was. The interface isn't a legal entity. Most desks now take pool outputs with a report attached — which is the point of the report.
Why not use Tornado directly? You can. This is the same pools with a door that doesn't make you assemble a report by hand.

Link

https_://tornado-mixer[.]net

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=3773673

Reference Link:
[1] Tornado Cash Mixer - Best Mixer | ARCHIVED
[2] https_://tornado-mixer[.]net | WHOIS | ARCHIVED

Domain: tornado-mixer.net
Registered On: 2026-11-04
Expires On: 2027-11-04
Updated On: 2026-11-04
Age: 6 Days
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Abuse Email: abuse-contact@publicdomainregistry.com

Additional Notes: I suggest everyone not to use this website or connect a wallet to it. I tagged this member and reported his topic, and I'll also report the site to MetaMask and PDR Ltd. to get it taken down. Be careful and always use official websites only.