The biggest day-to-day threat to users is phishing. Malicious actors create fake websites that mimic the official Tornado Cash UI to steal users’ funds or secret notes. Extreme vigilance is required. Always double-check the URL and only use known, verified links. Bookmarking the official site is a best practice. The Tornado Cash guide consistently warns against these threats and emphasizes that the protocol will never ask for your secret note via any communication channel.
