Attacker hijacks Tornado Cash governance via malicious proposal

The total control over Tornado Cash governance allows the attacker to withdraw all of the locked votes, drain all of the tokens in the governance contract and brick the router.