US Indicts Two Tornado Cash Co-Founders and Sanctions Semenov

On August 23, 2023, the U.S. Justice Department unsealed a three-count indictment against Tornado Cash co-founders Roman Storm and Roman Semenov, while the Treasury Department’s Office of Foreign Assets Control sanctioned Semenov. Federal agents arrested Storm in Washington state; prosecutors said Semenov remained at large.

The indictment charged each man with conspiracy to commit money laundering, conspiracy to violate U.S. sanctions and conspiracy to operate an unlicensed money-transmitting business. Those were accusations, not findings of guilt. The Justice Department expressly said both defendants were presumed innocent unless proven guilty.

From protocol sanctions to charges against people

The coordinated actions mattered because they shifted the U.S. response from sanctioning Tornado Cash to pursuing people accused of continuing to operate it. OFAC had first designated Tornado Cash on August 8, 2022, then replaced that action with a November 8, 2022 redesignation under cyber and North Korea-related authorities. The August 23, 2023 action added Semenov personally to the sanctions record as prosecutors opened a criminal case against him and Storm.

The government’s theory was narrower than the proposition that publishing privacy software is itself a crime. The indictment alleged continuing operational conduct: the founders created core service features, paid for infrastructure, promoted the mixer, maintained a relayer system and made millions of dollars from its operation. Prosecutors further alleged that they declined to implement required know-your-customer and anti-money-laundering controls despite victim complaints and evidence of illicit use.

Storm’s attorney, Brian Klein, disputed that Storm engaged in criminal conduct. In a statement reported by the Associated Press on August 23, Klein characterized the prosecution as a novel theory with implications for software developers and said Storm had cooperated with the investigation. That defense position was part of the contemporaneous record, but it had not been tested in court on the event date.

The amounts were government allegations

Tornado Cash pooled cryptocurrency deposits and withdrawals to make the connection between sending and receiving addresses harder to trace. The Justice Department alleged that the service facilitated more than $1 billion in money-laundering transactions and hundreds of millions of dollars for Lazarus Group, the North Korean state-linked hacking organization sanctioned by the United States.

Treasury supplied more specific attributions: more than $455 million from the March 2022 Ronin bridge theft, more than $96 million derived from the June 24, 2022 Harmony Horizon bridge theft, and at least $7.8 million from the August 2, 2022 Nomad theft. These are agency attributions tied to identified incidents, not a complete independent audit of Tornado Cash activity. They should not be added to the Justice Department’s broader figure as though they were separate measurement sets.

Officials alleged that Storm and Semenov knew Lazarus was using the service. Treasury said a front-end sanctions-screening measure was easy to evade and did not stop prohibited actors from interacting with the underlying service. The indictment likewise alleged that the founders privately understood the change would be ineffective while publicly presenting it as sanctions compliance.

What the actions did — and did not — establish

OFAC’s designation generally blocked Semenov’s property and interests in property within U.S. jurisdiction and prohibited dealings involving them. The criminal counts carried statutory maximums of 20 years for the money-laundering conspiracy, 20 years for the sanctions conspiracy and five years for the unlicensed money-transmission conspiracy. Maximums were not predictions of sentence.

As of August 23, 2023, no court had adjudicated these charges. The filings did not settle the broader legal status of decentralized privacy protocols or establish that every developer, governance participant or user was operating a money transmitter. What they established was a major enforcement test centered on alleged knowledge, control, continued operation and profit after documented illicit use.