Attacker hijacks Tornado Cash governance via malicious proposal
The total control over Tornado Cash governance allows the attacker to withdraw all of the locked votes, drain all of the tokens in the governance contract and brick the router.