Skip to main content
Sign in

Tornado Cash

avoid.net/tornado-cash→25/100·88% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:zachxbt]

Summary

Tornado Cash is an open-source, non-custodial Ethereum-based cryptocurrency mixer (tumbler) launched in 2019 by Roman Storm, Roman Semenov, and Alexey Pertsev that uses zero-knowledge cryptography to obscure transaction trails. The U.S. Treasury's OFAC sanctioned the protocol in August 2022, alleging it laundered over $7 billion including funds stolen by North Korea's Lazarus Group; those sanctions were overturned by the Fifth Circuit in November 2024 and formally lifted in March 2025. Criminal prosecutions of the founders remain ongoing in both the United States and the Netherlands.

Have evidence about Tornado Cash?

No evidence submitted yet — be the first.

On-chain audit

Editorial decisions, corrections, and updates are anchored on Solana.

audit log →version history →

Protocol Overview

Tornado Cash is a decentralized, non-custodial cryptocurrency mixing protocol deployed on Ethereum and several EVM-compatible blockchains. It was launched in December 2019, with its first fixed-denomination pool deployed in August 2019. The protocol uses zero-knowledge proof cryptography (specifically zk-SNARKs) to sever the on-chain link between depositor and withdrawal addresses. Users deposit a fixed denomination of ETH or ERC-20 tokens into a shared smart-contract pool and receive a cryptographic note; they can later use that note to withdraw funds to a new address with no direct blockchain link to the deposit. In 2020, the core pool smart contracts were made irreversibly immutable by their developers, meaning no individual could alter, pause, or control them after that point. Tornado Cash also issued a governance token (TORN) and operated a decentralized autonomous organization (DAO) for protocol upgrades. Legitimate privacy uses cited by advocates include shielding personal wealth, anonymous charitable donations, and preventing front-running in DeFi. The protocol was the largest cryptocurrency mixer on Ethereum by anonymity-set size at the time of sanctioning.

Sources

Founders and Key Individuals

Tornado Cash was co-founded by three individuals: Roman Storm (a U.S. resident based in Auburn, Washington), Roman Semenov (a Russian citizen), and Alexey Pertsev (a Russian national residing in the Netherlands). Storm and Semenov are named in a U.S. federal indictment filed August 23, 2023 in the Southern District of New York. Pertsev was arrested by Dutch authorities in August 2022 shortly after the OFAC sanctions. Semenov remains a fugitive, reportedly in Russia, and appears on the FBI's Most Wanted list for white-collar crime. He was also individually added to OFAC's SDN List in November 2022. Storm was arrested in the United States in August 2023 and has stood trial.

Sources

OFAC Sanctions — August 2022

On August 8, 2022, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) designated Tornado Cash under the International Emergency Economic Powers Act (IEEPA), adding it to the Specially Designated Nationals and Blocked Persons (SDN) List. OFAC alleged the protocol had been used to launder more than $7 billion in cryptocurrency since its 2019 launch, including over $455 million stolen by North Korea's Lazarus Group in the March 2022 Ronin/Axie Infinity hack, more than $96 million from the June 2022 Harmony Horizon Bridge heist, and at least $7.8 million from the August 2022 Nomad heist. In November 2022, OFAC updated the designation to include 53 Ethereum smart contract addresses associated with the protocol, including at least 20 immutable smart contracts. The sanctions effectively prohibited any U.S. person from interacting with the protocol and caused major exchanges and front-ends to block access. This marked the first time OFAC sanctioned a set of autonomous smart contracts rather than a named individual or corporate entity.

Sources

Van Loon Civil Challenge — Texas District Court and Fifth Circuit

On September 8, 2022, six individuals — including Coinbase employees and Ethereum developers, funded by Coinbase — filed suit in the U.S. District Court for the Western District of Texas (Van Loon v. Department of the Treasury), arguing that OFAC exceeded its statutory authority under IEEPA by sanctioning immutable smart contracts that could not be 'owned' by any person or entity. The plaintiffs also raised First Amendment arguments, contending that prohibiting interaction with open-source code infringed protected speech. On August 17, 2023, District Judge Robert Pitman ruled in favor of the Treasury, finding OFAC's designation lawful and rejecting the constitutional claims. On appeal, the Fifth Circuit Court of Appeals reversed that ruling on November 26, 2024. The appellate court held that Tornado Cash's immutable smart contracts do not constitute 'property' under IEEPA because they are not capable of being owned, controlled, or altered by any individual or entity — and therefore fell outside OFAC's designation authority. The court did not reach the First Amendment question. This ruling was considered a significant limitation on OFAC's ability to police decentralized crypto protocols.

Sources

OFAC Delisting — March 2025

On March 21, 2025, OFAC officially removed Tornado Cash and its associated smart contract addresses from the SDN List. The Treasury stated it exercised discretion in delisting, rather than explicitly conceding the Fifth Circuit ruling compelled the action. In its delisting notice, Treasury stated it remained 'deeply concerned about North Korea's state-sponsored hacking and money laundering campaign' and would continue to monitor transactions that may benefit malicious cyber actors. Notably, Roman Semenov was not removed from the SDN List as part of the delisting. The delisting restored the legal ability of U.S. persons to transact with the Tornado Cash smart contracts, though the criminal prosecution of Roman Storm continued independently of the sanctions status.

Sources

Alexey Pertsev — Netherlands Criminal Proceedings

Alexey Pertsev, a Russian national residing in the Netherlands, was arrested by Dutch authorities in August 2022 shortly after OFAC's sanctions designation. On May 14, 2024, the 's-Hertogenbosch court in the Netherlands found Pertsev guilty of money laundering and sentenced him to 64 months (approximately five years and four months) in prison. The court held that Pertsev bore criminal responsibility for failing to prevent criminals, including North Korean state hackers, from using Tornado Cash to launder more than $1.2 billion. Pertsev's defense argued that the open-source and automated nature of the smart contracts meant he could not have controlled how users interacted with the protocol; the court rejected this argument. Pertsev's bail applications were initially denied. On February 7, 2025, a Dutch court granted him conditional release under electronic monitoring to allow him to prepare his appeal. The appeal remains pending before a Dutch appellate court.

Sources

Roman Storm — U.S. Criminal Prosecution

Roman Storm was arrested in the United States on August 23, 2023. The indictment, filed in the Southern District of New York, charged Storm and co-defendant Roman Semenov with three counts: conspiracy to commit money laundering (maximum 20 years), conspiracy to operate an unlicensed money transmitting business (maximum 5 years), and conspiracy to violate IEEPA/sanctions (maximum 20 years). The government alleged that from 2019 to 2022, Storm and Semenov developed, marketed, and operated Tornado Cash while knowingly facilitating the laundering of over $1 billion in illicit funds, including proceeds from Lazarus Group hacks. Storm pleaded not guilty in September 2023. His trial began in late July 2025 in the SDNY before Judge Katherine Polk Failla. On August 6, 2025, the jury returned a mixed verdict: Storm was convicted on the conspiracy to operate an unlicensed money transmitting business count, but the jury deadlocked on the money laundering and sanctions violations counts. The government sought a retrial on the deadlocked counts; as of March 2026, the DOJ had filed for a retrial with a proposed start date in October 2026. Post-trial motions for acquittal filed by Storm's defense remained pending as of the time of this report. Roman Semenov remains a fugitive and is listed on the FBI's Most Wanted page.

Sources

Constitutional and Policy Debate

The Tornado Cash enforcement actions generated substantial legal and policy debate about the limits of government authority over open-source software. Civil liberties organizations including the Electronic Frontier Foundation (EFF) and Coin Center argued that OFAC's sanctions and the DOJ's prosecution raised serious First Amendment concerns, given that writing and publishing code is recognized as protected speech under U.S. precedent. Critics argued that sanctioning immutable, autonomously running smart contracts was unprecedented and legally unsound, since no individual could comply with a cease-and-desist directed at code that no one controls. Lawfare published multiple analyses from differing perspectives, with some scholars arguing the sanctions were an overly creative application of IEEPA and others contending that the protocol was more analogous to a money laundering tool than protected speech. The Fifth Circuit's November 2024 ruling resolved the property question without reaching the First Amendment issue, leaving that constitutional debate unresolved for future cases. The criminal prosecution of Roman Storm introduced a related question: whether a software developer can be held criminally liable for money laundering conducted by third parties using their autonomous, open-source tools. Storm's partial conviction and the pending retrial mean this question remains unsettled in U.S. law.

Sources

North Korea / Lazarus Group Nexus

A central basis for the U.S. government's actions against Tornado Cash was its alleged use by the Lazarus Group, a North Korean state-sponsored hacking organization already subject to U.S. sanctions. OFAC alleged that Lazarus used Tornado Cash to launder over $455 million stolen in the March 2022 Ronin Network / Axie Infinity hack — the largest known virtual currency theft at the time. Additional Lazarus-linked laundering through Tornado Cash was alleged in connection with the June 2022 Harmony Horizon Bridge hack ($96 million) and the August 2022 Nomad heist ($7.8 million). Blockchain analytics firms including Chainalysis and Elliptic reported that North Korean hackers returned to using Tornado Cash even after sanctions, including an estimated $100 million in ETH from the HTX/HECO breach laundered through the protocol beginning in 2024. The Treasury's March 2025 delisting statement explicitly noted continued concern about North Korean laundering activity.

Sources

Current Legal Status (as of May 2026)

As of May 2026, OFAC sanctions on Tornado Cash smart contracts have been lifted (effective March 21, 2025). U.S. persons may interact with the protocol without sanctions exposure, though standard anti-money-laundering obligations under FinCEN rules may still apply depending on the nature of use. Roman Storm has been convicted of one count (conspiracy to operate an unlicensed money transmitting business) and faces a retrial on the money laundering and sanctions violation counts, with the DOJ proposing an October 2026 start date. Roman Semenov remains a fugitive and continues to appear on OFAC's SDN List as an individually sanctioned person. Alexey Pertsev was conditionally released from Dutch custody in February 2025 on electronic monitoring and is pursuing an appeal of his 64-month conviction; that appeal remains pending. The broader legal question of developer liability for autonomous open-source code remains unresolved in U.S. courts.

Sources

Timeline

2019-08-01

Tornado Cash first fixed-denomination pool deployed on Ethereum mainnet.

Tornado Cash — Wikipedia

2019-12-01

Tornado Cash protocol formally launched by Roman Storm, Roman Semenov, and Alexey Pertsev.

Tornado Cash Founders Charged — DOJ SDNY

2020-01-01

Core pool smart contracts made irreversibly immutable by developers, removing any individual ability to alter or control them.

Fifth Circuit Opinion No. 23-50669

2022-03-23

Lazarus Group hacks Axie Infinity's Ronin bridge, stealing approximately $625 million; over $455 million alleged to have been laundered through Tornado Cash.

U.S. Treasury Sanctions Tornado Cash — Treasury.gov

2022-06-24

Harmony Horizon Bridge heist: $96 million stolen, with funds alleged to have been laundered via Tornado Cash.

U.S. Treasury Sanctions Tornado Cash — Treasury.gov

2022-08-02

Nomad bridge hack: at least $7.8 million laundered through Tornado Cash.

U.S. Treasury Sanctions Tornado Cash — Treasury.gov

2022-08-08

OFAC designates Tornado Cash on the SDN List under IEEPA, citing over $7 billion in alleged laundering including Lazarus Group proceeds.

U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash

2022-08-12

Alexey Pertsev arrested by Dutch authorities in the Netherlands.

Tornado Cash developer Alexey Pertsev convicted — Axios

2022-09-08

Van Loon v. Department of the Treasury filed in the Western District of Texas; plaintiffs backed by Coinbase challenge OFAC's authority to sanction immutable smart contracts.

Crypto Engineers, Investors Sue US Treasury Over Tornado Cash Sanctions — CoinDesk

2022-11-01

OFAC updates Tornado Cash designation to include 53 Ethereum addresses, among them at least 20 immutable smart contracts. Roman Semenov individually added to OFAC SDN List.

Treasury Designates Roman Semenov — Treasury.gov

2023-08-17

Western District of Texas grants summary judgment in favor of Treasury in Van Loon case, upholding OFAC's designation of Tornado Cash.

Coinbase-Funded Tornado Cash Lawsuit Against Treasury Department Ends In Defeat — CryptoNews

2023-08-23

DOJ indicts Roman Storm and Roman Semenov in SDNY on three counts: conspiracy to commit money laundering, conspiracy to operate an unlicensed money transmitting business, and conspiracy to violate IEEPA sanctions. Storm arrested same day; Semenov remains at large.

Tornado Cash Founders Charged With Money Laundering — DOJ SDNY

2023-09-06

Roman Storm pleads not guilty in SDNY.

Tornado Cash Developer Roman Storm Pleads Not Guilty — CoinDesk

2024-05-14

Dutch court in 's-Hertogenbosch finds Alexey Pertsev guilty of money laundering and sentences him to 64 months in prison.

Tornado Cash developer Alexey Pertsev convicted — Axios

2024-11-26

Fifth Circuit reverses Western District of Texas ruling in Van Loon, holding that Tornado Cash's immutable smart contracts are not 'property' under IEEPA and OFAC exceeded its authority in designating them.

Fifth Circuit Opinion No. 23-50669

2025-02-07

Dutch court grants Alexey Pertsev conditional release under electronic monitoring to prepare his appeal.

Tornado Cash Developer Alexey Pertsev Released From Dutch Prison — The Daily Hodl

2025-03-21

OFAC officially removes Tornado Cash from the SDN List. Roman Semenov remains individually sanctioned.

OFAC Cyber-related Designation Removal — Treasury.gov

2025-08-06

Jury in SDNY convicts Roman Storm of conspiracy to operate an unlicensed money transmitting business; jury deadlocks on money laundering and sanctions violation counts.

Tornado Cash Jury Deadlocked on Most Serious Charges — Money Laundering Watch

2026-03-09

DOJ files for retrial of Roman Storm on deadlocked counts, proposing October 2026 start date.

US Government Seeking To Retry Tornado Cash Developer Roman Storm — The Daily Hodl

Research Gaps

4 open · agent-resolvable

Heuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.

  • [high]
    no regulatory

    No regulatory or sanctions cross-check. Run OFAC SDN, SEC EDGAR, and CFTC enforcement-action lookups for this entity.

  • [med]
    single source

    Only one source has reported on this entity. Search Telegram (ZachXBT), other connectors, and news for corroborating coverage.

  • [med]
    unarchived sources

    Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.

  • [low]
    weak evidence

    Page has thin evidence. Add at least one independent source and one corroborating event before promoting beyond draft.

Provenance
src:zachxbt

This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive. Full audit log →

model: claude-code-investigator

generated: 5/4/2026, 4:05:05 PM

last updated: 5/8/2026, 2:42:01 AM

avoid.net — verified advice for a post-truth world