Mixers & coinjoin
Tornado Cash
Tornado Cash is the reference zero-knowledge mixer on Ethereum, sanctioned by U.
- Website
- tornado.cash
- KYC
- no KYC — Ethereum-side privacy protocol — zero-knowledge mixer. No accounts; the contracts are immutable. Sanctioned by the U.S. Treasury OFAC in August 2022; that sanction has had complex legal history since.
- Status
- seized
- Fiat on-ramp
- no
- Payment
- crypto
- Jurisdiction
- protocol — decentralized; developers indicted in 2023
- Founded
- 2019
- Open source
- yes
- Custodial
- no
- Last verified
- Sources
- 3
Overview
What Tornado Cash is#
A set of immutable Ethereum smart contracts implementing a zero-knowledge mixer. Deposits go into one of fixed-size pools (0.1 / 1 / 10 / 100 ETH); withdrawals can be made later from a different address by proving knowledge of the deposit secret, with the link between deposit and withdrawal cryptographically hidden.
Threat-model fit#
Historical and regulatory reference. The legal and operational risk profile in 2026 is the defining property — the protocol itself works as designed, but interacting with it as a U.S. person or anyone routed through a regulated venue is fraught.
Strengths
- Reference zero-knowledge mixer on Ethereum; widely studied design.
- Immutable smart contracts — the protocol itself cannot be turned off by the operator.
Caveats
- Sanctioned by U.S. Treasury OFAC in August 2022 — U.S. persons are prohibited from interacting with listed addresses. A November 2024 Fifth Circuit ruling held that immutable smart contracts cannot be sanctioned as "property"; OFAC partially walked back the listing in early 2025, but the operational and legal posture remains contested.
- Roman Storm (one of the developers) was tried in the U.S. in 2024 on money-laundering charges related to the protocol; the case has shaped how mixer developers think about legal exposure.
- On Ethereum-side address screening, most regulated exchanges flag any address that has ever interacted with Tornado contracts.
- Listed for historical reference. Real-world use carries non-trivial legal and operational risk depending on jurisdiction.
- Facts need re-verification by operator (last seeded 2026-01).
Verdict
Tornado Cash is the reference zero-knowledge mixer on Ethereum, sanctioned by U.S. Treasury in August 2022 and central to the most-cited "can immutable code be sanctioned?" legal debate of the 2020s. The contracts are still on-chain; using them as a U.S. person remains legally fraught even after the partial 2024-2025 OFAC walk-back. Listed here for historical and reference purposes. Treat as a case study, not a recommendation.
FAQ
- Does Tornado Cash require KYC?
- As of Jan 1, 2026, Tornado Cash does not require KYC for normal use. Ethereum-side privacy protocol — zero-knowledge mixer. No accounts; the contracts are immutable. Sanctioned by the U.S. Treasury OFAC in August 2022; that sanction has had complex legal history since.
- What payment methods does Tornado Cash accept?
- Tornado Cash accepts: crypto.
- Where is Tornado Cash based?
- Operating jurisdiction listed as protocol — decentralized; developers indicted in 2023. This is best-known information; corporate structure can be opaque.
Sources
- Tornado Cash documentation (archived) · accessed
- U.S. Treasury — Tornado Cash sanctions press release (August 2022) · accessed
- Wikipedia — Tornado Cash · accessed
Mentioned in
Quick answers
Explainers
Alternatives to Tornado Cash
Entry last verified . Notice an error? Send it via the contact form.