HostDeFi › Guides › The Tornado Cash case

The Tornado Cash case — what it means for ordinary crypto users

One protocol produced a sanctions fight the government lost, a criminal trial nobody fully won, and the clearest map yet of where US crypto privacy law actually stands.

Educational guide · reviewed August 2026 · not legal advice

No single story has shaped crypto privacy more than Tornado Cash. A mixer built from immutable smart contracts, it was sanctioned by the US Treasury in 2022, unsanctioned after a court loss in 2025, and all the while its co-founder Roman Storm stood trial in Manhattan for building it. The case became the industry's constitutional question: when software runs by itself, who — if anyone — is legally responsible for what strangers do with it? If you use crypto at all, the answers being hammered out here will eventually touch the tools in your wallet. Here is what actually happened, where things stand as of August 2026, and what it does and doesn't mean for you.

What Tornado Cash is, and why it was different

Tornado Cash is a set of Ethereum smart contracts implementing a shielded pool: deposit a fixed amount, receive a cryptographic note, and later withdraw to any address by proving — in zero knowledge — that you made some deposit, without revealing which. The public link between source and destination breaks. Two design facts made the legal fight unusual. The core contracts are immutable — no admin can pause, modify or filter them — and they run without an operator, taking no fees to any company. Whatever one thinks of mixers, this wasn't a business holding client funds; it was published code executing by itself, which is why every legal theory in the saga kept colliding with a question older than crypto: is publishing software an act you can punish for the software's later misuse?

The sanctions fight the government lost

Treasury's sanctions office blacklisted Tornado Cash in August 2022, effectively forbidding US persons from touching the contracts, after attributing major laundering flows — including North Korean state-hacker proceeds — to the pools. The industry sued, and in November 2024 a federal appeals court delivered the landmark: immutable smart contracts, having no owner and being incapable of being controlled, are not the "property" of any sanctionable person, so the designation exceeded the sanctions statute. Treasury removed Tornado Cash from the list in March 2025. That outcome — the delisting of a protocol on those grounds — remains one of the most consequential legal wins in crypto's history, and it is settled fact rather than pending litigation.

The trial that split the middle

Roman Storm faced three conspiracy counts: operating an unlicensed money-transmitting business, money laundering, and sanctions violations. Prosecutors argued the founders ran a service they knew criminals used and profited anyway; the defense answered that immutable code isn't a "business" one operates, that the developers custodied nothing and could stop no one, and that liability for users' crimes can't attach to publishing software. In August 2025 the jury split the middle: guilty on the unlicensed-money-transmitting count, deadlocked on the two heavier ones — a partial mistrial that satisfied no one and settled little. As of August 2026 the aftermath is still in motion: an acquittal motion argued in April 2026 awaits the judge's ruling, prosecutors have pressed to retry the deadlocked counts with an October 2026 window requested, and sentencing on the single conviction — which carries up to five years — waits behind both.

The policy backdrop makes the picture stranger. A 2025 Justice Department memo told prosecutors not to target mixing services for their users' acts; a March 2026 Treasury report to Congress acknowledged outright that lawful users may use mixers to preserve financial privacy. The same government pursuing the retrial has, in writing, endorsed the legitimacy of the tool category — a contradiction the courts, not this page, will eventually resolve.

What it means if you just use crypto

1. Privacy tools are not contraband in the US. The sanctions were unwound, and current policy documents recognize lawful privacy uses. What's being litigated is developer liability and the boundaries of money-transmission law — not whether you may value financial privacy.
2. Conduct, not tooling, is what prosecutors charge. Every count in the Storm case is about allegedly facilitating criminal proceeds. Laundering money through anything is illegal; moving your own lawful funds privately is a different act entirely. The tool never launders the conduct in either direction.
3. Counterparty screening exists because of cases like this. Exchanges and services now routinely score deposits by history. A serious privacy design responds with selective disclosure — the ability to prove your own funds' story when you choose — which is why viewing keys and association proofs, not maximal anonymity, are where credible building moved.
4. The retrial is worth watching even if you'll never touch a mixer. A conviction theory that reaches people who publish autonomous code would ripple through wallets, DEX front-ends and every open-source tool you use; an acquittal would harden the opposite line. Few court dates matter more to crypto's plumbing than October 2026.

None of this changes the daily discipline of trading safely: whatever the courts decide about privacy infrastructure, the token you're about to buy can still be a trap today. Verify contracts before you trade — that habit survives every legal era.

Frequently asked