Tornado Cash Governance Attack via Metamorphic Contracts

This repository implements a simplified PoC that showcases how a contract can morph using a combination of CREATE2, CREATE, and SELFDESTRUCT. A similar approach was used as part of the governance attack on Tornado Cash[^1] in May 2023.

[^1]: A detailed post-mortem can be found here, and a full technical replication (using Foundry) of the attack here.