A group of U.S. Democratic lawmakers has raised alarm over the ongoing operations of Tornado Cash, the controversial cryptocurrency mixing service that was blacklisted in 2022. Despite being accused of facilitating the laundering of over $7 billion in illicit funds, Tornado Cash remains accessible, prompting lawmakers to demand answers from the U.S. Treasury Department.
In a letter dated November 14, 2024, Rep. Brad Sherman and several of his colleagues questioned why the Treasury Department has not fully curtailed the continued use of Tornado Cash, which has been linked to North Korean hacking groups and various criminal organizations. The lawmakers have expressed deep concern over the platform’s decentralized nature, which has made enforcement of sanctions significantly more complicated.
Tornado Cash Still Operational
Tornado Cash, a decentralized crypto-mixing service, was sanctioned by the U.S. Treasury’s Office of Foreign Assets Control (OFAC) in August 2022. The platform was accused of facilitating the laundering of vast sums of illicit funds, including over $1 billion tied to cybercrime and state-sponsored hacking. The platform’s role in the laundering of funds from North Korean hackers has been one of its most serious allegations.
Despite these sanctions, Tornado Cash remains operational. Unlike centralized mixers, such as Blender and Sinbad, which ceased operations after being sanctioned, Tornado Cash is decentralized, meaning there is no central authority to shut it down. This has left many wondering how effective the Treasury’s actions have been in curbing its use.
The lawmakers have noted an alarming increase in Tornado Cash usage in 2024. In the first half of the year alone, the service processed $1.8 billion in deposits, a staggering 45% increase over the total amount processed in 2023. This surge in activity underscores the challenges of enforcing sanctions on decentralized services, where users can bypass traditional financial institutions and remain relatively anonymous.
Enforcement Struggles and Legal Questions
The letter sent to the Treasury also raised several key questions regarding enforcement actions. Lawmakers are asking the Treasury to provide clarity on the extent of illicit activities facilitated by Tornado Cash since the sanctions were imposed. They are particularly interested in how the U.S. government is tracking and blocking funds that may be funneled through the service by sanctioned individuals, rogue states, or terrorist organizations.
A particularly concerning issue is Tornado Cash’s accessibility through decentralized smart contracts. These contracts are not controlled by any single entity, which means that the platform’s operations cannot be easily shut down. In contrast, mixers like Blender and Sinbad, which are centralized, were forced to cease operations once they were sanctioned. This raises a fundamental question: How can the U.S. government regulate or enforce sanctions against a platform that has no central operator?
The lawmakers also requested information on whether the Treasury is considering imposing secondary sanctions on non-U.S. entities that interact with Tornado Cash or process mixed funds. The Treasury’s response to this inquiry could set a significant precedent for how the U.S. approaches cryptocurrency regulation, especially in the context of international actors and non-compliant financial institutions.
Additionally, the letter addressed the regulatory landscape surrounding cryptocurrency mixers in general. The lawmakers pressed the Treasury to provide updates on the Financial Crimes Enforcement Network’s (FinCEN) proposed rules, which would require financial institutions to track transactions involving mixers. These rules, which are still under development, could play a crucial role in reducing the anonymity that platforms like Tornado Cash offer to bad actors.
The Fight Over Privacy and Decentralization
While lawmakers push for more stringent measures, Tornado Cash continues to face legal scrutiny. Privacy advocates have challenged the U.S. government’s sanctions, arguing that decentralized platforms like Tornado Cash cannot be treated as entities under U.S. law, as they are not controlled by a single organization or individual.
This debate has taken a legal turn, with Tornado Cash co-founder Roman Storm currently awaiting trial for his alleged role in the platform’s money laundering operations. The trial, originally scheduled for earlier in 2024, is now set for April 2025. It will likely provide further insight into how U.S. courts interpret the legality of decentralized platforms and whether individuals involved in such platforms can be held accountable under U.S. law.
Cryptocurrency Regulation in Flux
The push for more stringent cryptocurrency regulations comes at a time when the U.S. government’s stance on digital assets is in flux. With the incoming administration of Republican President-elect Donald Trump, it’s unclear whether cryptocurrency enforcement will become more or less aggressive. At a recent legal conference in New York, current and former government lawyers indicated that while financial fraud cases will continue to be pursued, the focus of the Justice Department is expected to shift toward other priorities, such as immigration enforcement.
Despite the shifting political landscape, the Securities and Exchange Commission (SEC) has come under growing scrutiny for its “regulation-by-enforcement” approach to the crypto industry. Critics argue that the SEC’s tendency to pursue legal action against crypto firms, without providing clear and comprehensive regulatory guidelines, has created confusion in the industry. This uncertainty has led to a significant rise in legal battles between crypto firms and regulators, with many questioning the fairness and transparency of the process.
As for Tornado Cash, the platform’s continued operation in the face of sanctions highlights the growing complexity of regulating decentralized financial systems. The U.S. government’s next moves will be crucial in determining how effectively it can rein in illicit cryptocurrency activities while balancing privacy rights and the realities of decentralized platforms.