A malicious proposal passed by the Tornado Cash DAO gave an attacker complete control over its governance system.