What happened:: This member promoted a fake website impersonating the official Tornado Cash website, a well-known mixer. I checked the site's source code and confirmed that it contains wallet drainer functions designed to steal users' funds.
The WalletConnect metadata literally says Connect wallet to drain, and the wallet connection interface tells users: The wallet will sign the drain transactions.
Also, the drainAll() function reads users' ERC-20 token balances and creates transactions to send their entire balances to a fixed address.
Tornado Cash note → compliance report
ETH / DAI / USDC / USDT / WBTC — 0.1–100 ETH equivalent, no account
Short versionNote in, report out. No account, no email, no KYC, no logs. If you've ever had to explain where a withdrawal came from to somebody holding your funds, that's the part this fixes.
What this actually isA Tornado Cash frontend. Deposits go to the pool contract, not to us — we never hold anything. You keep the note, the note is the money. The addition is a compliance report generator: paste the note, get a document tying that deposit to that withdrawal, the kind of paper a compliance desk or OTC broker reads instead of asking you to describe the source of funds in a chat box and hoping the clerk is in a good mood.
Pool depth at the 0.1 ETH denomination, as of writing:
374,263 deposits. It moves; check the site.
Assets and limitsETH, DAI, USDC, USDT, WBTC. Minimum 0.1 ETH equivalent, maximum 100 ETH equivalent per transaction. More than that, split and queue.
SpeedsStandard / Fast / Instant. Gas is yours, faster costs more of it. Default is fine unless you're on a clock.
WalletsMetaMask, OKX, Trust, Bitget, Coinbase Wallet, Phantom, Rabby, Ledger. Extension or QR.
What it's good for- Breaking a balance into pool-sized chunks and consolidating afterwards — the destination field takes one address, everything lands there.
- Producing a paper trail that survives scrutiny without producing an identity.
- Stablecoin work where you'd rather the on/off ramp didn't see the rest of your wallet.
- Sweeping a wallet whose history you don't fully control — the receiving desk gets something to file.
What it isn'tNot a mixer with its own anonymity set. It borrows Tornado's, with everything that implies: relayer dependency, and a protocol with a sanctions history and a messy but improving exchange-acceptance record. Don't lose the note — nobody regenerates it for you. Don't reuse a round number you've used elsewhere.
FAQCustodial? No. Contract-level deposit, direct withdrawal.
Logs? Nothing kept past the session.
Fees? Relayer fee plus gas. Relayers set their own rate; it runs around 0.3% on the ETH pool and varies.
Sanctioned? The protocol was. The interface isn't a legal entity. Most desks now take pool outputs with a report attached — which is the point of the report.
Why not use Tornado directly? You can. This is the same pools with a door that doesn't make you assemble a report by hand.
Linkhttps_://tornado-mixer[.]net
[1]
Tornado Cash Mixer - Best Mixer |
ARCHIVED[2] https_://tornado-mixer[.]net |
WHOIS |
ARCHIVEDDomain: tornado-mixer.net
Registered On: 2026-11-04
Expires On: 2027-11-04
Updated On: 2026-11-04
Age: 6 Days
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Abuse Email:
abuse-contact@publicdomainregistry.com I suggest everyone not to use this website or connect a wallet to it. I tagged this member and reported his topic, and I'll also report the site to MetaMask and PDR Ltd. to get it taken down. Be careful and always use official websites only.
