OFAC Designated Tornado Cash Under U.S. Cyber Sanctions

The U.S. Treasury Department’s Office of Foreign Assets Control designated Tornado Cash on August 8, 2022, placing the Ethereum-based virtual-currency mixer on the Specially Designated Nationals and Blocked Persons List under a cyber-sanctions authority. OFAC’s dated list update identified Tornado Cash, Tornado Cash Classic and Tornado Cash Nova and attached Ethereum and USDC address identifiers to the entry.

The action mattered because it applied the United States’ blocking-sanctions machinery to a service implemented through blockchain software, not simply to a conventional exchange, custodian or named individual. It gave U.S. persons and digital-asset businesses an immediate compliance problem while sharpening an unresolved institutional question: how sanctions designed around persons and property would operate against software that could continue executing on Ethereum.

What the designation did

Treasury said all property and interests in property of Tornado Cash in the United States, or in the possession or control of U.S. persons, were blocked and had to be reported to OFAC. Unless authorized by OFAC or exempt, transactions by U.S. persons or within or transiting the United States involving blocked property or interests in property were prohibited. The restrictions also extended to entities owned 50% or more by blocked persons under OFAC’s standard rule.

OFAC acted under Executive Order 13694, as amended. Treasury said Tornado Cash had materially assisted or provided support for cyber-enabled activity originating outside the United States that posed a significant threat and involved misappropriation for private financial gain. The designation followed OFAC’s May 6, 2022 action against Blender.io, which Treasury described as its first sanction against a virtual-currency mixer.

The August 8 records established an administrative sanctions action, not a criminal conviction. They did not name Tornado Cash’s developers as sanctioned persons, adjudicate the liability of any particular user or make every privacy-enhancing technology unlawful.

Treasury’s figures and their limits

Treasury alleged that Tornado Cash had been used to launder more than $7 billion in virtual currency since its creation in 2019. Within that cumulative claim, the department identified more than $455 million stolen by the North Korea-linked Lazarus Group, more than $96 million derived from the June 24, 2022 Harmony bridge theft, and at least $7.8 million from the August 2, 2022 Nomad theft.

Those amounts were Treasury’s contemporaneous attributions, not Coinburn calculations. The release did not disclose a complete address set for each incident, valuation timestamps, exchange-rate sources or a reproducible method for the $7 billion total. Reuters separately reported on August 8 that Elliptic estimated at least $1.3 billion in proceeds of crime had been laundered through Tornado Cash. The difference shows why aggregate protocol flow, funds described by an agency as laundered, and independently classified criminal proceeds should not be treated as interchangeable measurements.

No cryptocurrency price, return, trading-volume or market-capitalization claim is used here. The event’s significance rests on the verified sanctions action and its compliance implications, not on an unverified token-price reaction.

Why the institutional boundary mattered

Tornado Cash was designed to break the public link between deposits and withdrawals, providing transaction privacy that could serve lawful users as well as people moving stolen assets. Treasury’s rationale focused on repeated use by malicious cyber actors and what it described as ineffective controls. The designation consequently placed financial privacy, open-source infrastructure and national-security enforcement in direct tension.

For exchanges, custodians, stablecoin issuers, wallet providers and screening vendors, OFAC’s published identifiers created concrete exposure to blocked-property rules. Yet Ethereum smart contracts could remain available at the protocol layer even if websites, hosted interfaces or regulated intermediaries restricted access. On August 8, that difference between legal prohibition, intermediary compliance and technical persistence had not been resolved by the announcement.

The defensible event-day conclusion was therefore narrow but consequential: OFAC had formally designated Tornado Cash and associated blockchain identifiers, and U.S. sanctions obligations applied immediately within their jurisdictional scope. The record did not establish how every decentralized component would be treated, whether licenses would address legitimate pending transfers, or how courts would assess the designation. Those questions remained open after August 8, 2022.