Tornado Cash removed from OFAC sanctions list in crypto privacy win
Mar 21, 2025
Key Points
- U.S. Treasury removes Tornado Cash from OFAC sanctions list following a legal challenge by Coinbase CEO Brian Armstrong and Coin Center, signaling reduced regulatory pressure on the privacy protocol itself.
- Tornado Cash founders including Roman Storm still face April criminal trial on money laundering and sanctions evasion charges, with Storm risking up to 45 years in prison.
- The case exposes a structural tension in crypto: protocols are code, but someone must operate frontends and handle fiat on-ramps, making founders vulnerable to prosecution even if the underlying tool remains legal.
Summary
The U.S. Treasury Department removed Tornado Cash from the OFAC sanctions list. Tornado Cash is a non-custodial Ethereum smart contract that allows users to mix crypto transactions, obscuring the trail between sender and recipient.
Coinbase CEO Brian Armstrong and Coin Center sued the government and won on the grounds that sanctioning code infringes on privacy rights. The delisting represents a legal victory for crypto privacy advocates and a signal that regulatory pressure on the protocol itself may be easing. Vitalik Buterin, Ethereum's creator, signaled support for the founders' ongoing legal battles with a post saying "no man left behind" and calling for the case against Roman Storm and Alex Pertsev to be dismissed.
The protocol's legal reprieve does not extend to its creators. Founders including Roman Storm still face criminal trial in April on charges of operating an unlicensed money transmitting business, conspiracy to commit money laundering, and sanctions evasion. Storm faces up to 45 years in prison. He argues the prosecution amounts to criminalizing open-source software development itself. A developer recently sued the DOJ out of fear of releasing new software tools, suggesting the case has already created a chilling effect.
The underlying problem is structural. The protocol is autonomous code, but someone must operate the frontend interface, pay for hosting on AWS, and handle fiat on-ramps. That corporate entity becomes exposed to enforcement. The crypto industry has historically solved this with layered legal structures—foundations managing the protocol separately from corporate entities handling user-facing services—but Tornado Cash's design may have crossed lines prosecutors argue were too close to facilitation.
Crypto developers and libertarian voices treat this as a privacy and free speech issue. Vitalik and others argue law enforcement should target criminal end-users, not developers, just as they pursue Ross Ulbricht rather than Satoshi Nakamoto. The counterargument, not detailed in full, is that allegations center on whether the founders profited directly from money laundering operations, a distinction between building neutral tools and actively capturing criminal proceeds.
The removal from OFAC sanctions clears the protocol to function on the blockchain. The founders' criminal liability remains unresolved until trial.