What Is a Crypto Mixer? Tornado Cash, the OFAC Sanctions, the Court Reversal, and Why Governments Want Them Banned

TL;DR: A crypto mixer (also called a tumbler) is a service that pools cryptocurrency from multiple users, shuffles the funds, and returns equivalent amounts to each user minus a fee, making it extremely difficult to trace which input coins correspond to which output coins on the blockchain. The privacy purpose is legitimate: on public blockchains like Bitcoin and Ethereum, every transaction is permanently visible and traceable, meaning anyone who knows your wallet address can see your entire financial history. Mixers break this traceability. The problem is that the same privacy that protects ordinary users also enables criminals to launder stolen funds. Tornado Cash, the largest Ethereum mixer, mixed over $7.6 billion worth of ETH between 2019 and 2022, of which approximately 30 percent was linked to illicit actors including $455 million stolen by North Korea's Lazarus Group from Axie Infinity's Ronin Network. OFAC sanctioned Tornado Cash in August 2022, banning US persons from interacting with it. The US Fifth Circuit Court of Appeals overturned the sanctions in November 2024, ruling that immutable smart contract code cannot be legally classified as property subject to OFAC sanctions. OFAC officially lifted the sanctions on March 21, 2025 under the Trump administration. Developer Roman Storm was found guilty of conspiracy to operate an unlicensed money transmitting business in August 2025, though the jury could not reach a verdict on the more serious money laundering and sanctions conspiracy counts. The legal status of crypto mixers in 2026 is complex: the Tornado Cash smart contracts are no longer sanctioned, but using mixers for money laundering remains illegal and using them while knowingly handling criminal proceeds carries criminal liability. MediaCrypto note: the Tornado Cash case is the most consequential legal battle in crypto privacy history. It established that autonomous software code on a public blockchain cannot be treated as an entity by regulators, while simultaneously demonstrating that developers of such tools can be personally held criminally liable for how third parties use them.

The transparency of public blockchains is both a feature and a problem. For verifying transactions, preventing double-spending, and auditing protocol behavior, the public ledger is essential. For personal financial privacy, it is a significant concern. Every Bitcoin and Ethereum wallet address, while pseudonymous, is permanently linked to every transaction it has ever made. Anyone who can link your wallet address to your real identity, which exchanges do through KYC processes, can reconstruct your complete financial history.

Crypto mixers address this privacy gap. Whether they do so in a way that is legally and ethically acceptable is the question at the center of several years of litigation, legislation, and prosecution.

---

How Crypto Mixers Work

The basic mechanism is simple: deposit crypto into the mixer, wait for other users to deposit, and receive back an equivalent amount from a pool of mixed coins. The returned coins have a different transaction history from the deposited coins, making blockchain analysis unable to link input to output.

Centralized mixers operate as businesses: a company manages the pool and the shuffling. They are the simpler type, but because they hold user funds and know the input-output mapping, they can be compelled by law enforcement to provide records and are subject to money services business (MSB) regulations requiring AML compliance and licensing.

Decentralized mixers like Tornado Cash operate through smart contracts with no central operator. Tornado Cash used a zero-knowledge proof system: depositors prove they made a deposit without revealing which deposit they made, allowing them to withdraw without any on-chain link between the deposit and withdrawal addresses. Because the contracts are immutable and autonomous, no individual controls or can stop the mixing process once deployed.

This autonomy was at the center of the legal dispute: if no person controls or operates the mixer, can it be sanctioned or criminally prosecuted?

---

The Tornado Cash Story: From $7.6 Billion Mixed to OFAC Sanctions

Tornado Cash launched on Ethereum in August 2019. By the time OFAC sanctioned it in August 2022 it had processed over $7.6 billion worth of ETH. Chainalysis data showed approximately 30 percent of those funds were linked to illicit actors.

The most significant illicit use was the Lazarus Group's laundering of $455 million stolen from Axie Infinity's Ronin Network in March 2022, one of the largest crypto hacks in history. Lazarus, North Korea's state-sponsored hacking organization, used Tornado Cash to obscure the movement of the stolen ETH through the mixer.

OFAC's August 2022 designation added Tornado Cash and its associated Ethereum addresses to the Specially Designated Nationals list, making it illegal for US persons to interact with the protocol. OFAC also banned the smart contract code itself, which was the legally unprecedented element of the designation.

---

The Legal Battle: Courts vs Regulators

The sanctions were immediately challenged by Tornado Cash users, including investors backed by Coinbase, in the Van Loon v. Department of the Treasury case. The argument: OFAC's authority under the International Emergency Economic Powers Act covers property owned or controlled by sanctioned parties, but immutable open-source smart contracts that no individual owns or controls cannot be property in any legal sense.

The US Fifth Circuit Court of Appeals agreed in November 2024, ruling that Tornado Cash's immutable smart contracts could not be sanctioned as property because they cannot be owned, altered, or controlled by any person. The court acknowledged the real-world downsides but said it was Congress's role to update the 1977 law for the internet age, not the court's role to expand OFAC's authority beyond its statutory limit.

On March 21, 2025, OFAC officially removed Tornado Cash from the sanctions list, reflecting both the court ruling and the Trump administration's more crypto-friendly enforcement posture. The sanctions are lifted and transactions involving Tornado Cash are no longer automatically prohibited for US persons.

---

The Developer Prosecution: Roman Storm's Conviction

While the sanctions were being litigated and eventually lifted, the US government pursued criminal charges against Tornado Cash's developers. Roman Storm, one of the founders, was tried in the Southern District of New York in August 2025. After a four-week trial, the jury found him guilty of conspiracy to operate an unlicensed money transmitting business but could not reach a verdict on the more serious charges of conspiracy to commit money laundering and conspiracy to violate sanctions.

The partial conviction is significant: it establishes that developers of privacy tools can be criminally liable for facilitating money transmission without appropriate licensing, even if the tool itself is autonomous software. The jury's inability to convict on money laundering and sanctions charges preserves some ambiguity about the full scope of developer liability.

Co-developer Alexey Pertsev was separately prosecuted in the Netherlands and sentenced to five years and four months in prison in May 2024 for money laundering.

---

What Crypto Mixers Are Legal for in 2026

Using a crypto mixer is not categorically illegal in most jurisdictions. The legal issue arises when mixers are used to launder the proceeds of crime or circumvent sanctions. Using a mixer for legitimate privacy purposes, protecting your wallet address from being linked to your real identity without handling criminal proceeds, is not itself a crime in most jurisdictions.

The practical reality in 2026 is that Tornado Cash's sanctions are lifted but its use still serves as a risk indicator in blockchain analytics tools. Compliance professionals and exchanges flag mixer-associated addresses as elevated risk. Even if the mixer use itself was legal, receiving funds through a mixer can trigger compliance holds and account restrictions at regulated exchanges.

Alternative privacy tools include privacy coins like Monero (XMR), which builds privacy into the protocol layer rather than as a mixing service, and Railgun, an EVM privacy protocol endorsed by Vitalik Buterin as a more compliance-aware privacy solution that uses privacy pools to make it harder for malicious actors to use the system.

---

About the Author

This article was researched and written by the MediaCrypto editorial team. MediaCrypto is a cryptocurrency news and market analysis publication covering Bitcoin, Ethereum, altcoins, regulatory developments, and market trends. Follow us on X at @MediaCrypto_AI and on Instagram.

FAQ — Crypto Mixers Explained 2026

What is a crypto mixer? A crypto mixer (or tumbler) is a service that pools cryptocurrency from multiple users, shuffles the funds, and returns equivalent amounts, making it extremely difficult to trace which input coins correspond to which output on the blockchain. They are used for financial privacy on transparent public blockchains.

Was Tornado Cash sanctioned? Yes. OFAC sanctioned Tornado Cash in August 2022 citing its role in laundering over $7.6 billion including $455 million stolen by North Korea's Lazarus Group. The US Fifth Circuit Court of Appeals overturned the sanctions in November 2024, ruling immutable smart contract code cannot be legally classified as property. OFAC officially lifted the sanctions on March 21, 2025.

Are crypto mixers legal in 2026? Using a mixer for legitimate privacy purposes is not categorically illegal in most jurisdictions. Using a mixer to launder criminal proceeds or circumvent sanctions remains illegal. Mixer-associated addresses are flagged as elevated risk by compliance tools even after Tornado Cash's sanctions were lifted.

What happened to Tornado Cash's developers? Roman Storm was convicted in August 2025 of conspiracy to operate an unlicensed money transmitting business but the jury could not reach a verdict on money laundering and sanctions conspiracy charges. Dutch developer Alexey Pertsev was sentenced to five years and four months in a Netherlands court in May 2024.

What are alternatives to crypto mixers for privacy? Monero (XMR) builds privacy into the protocol layer rather than as an external mixing service. Railgun is an EVM privacy protocol that uses privacy pools endorsed by Vitalik Buterin as a more compliance-aware privacy solution that makes it harder for malicious actors to use the system compared to permissionless mixers.

For live crypto news and market data see https://mediacrypto.ai

Read also: How to Keep Your Crypto Safe From Hackers in 2026 — https://mediacrypto.ai/news/how-to-keep-your-crypto-safe-from-hackers-in-2026

Read also: The Biggest Crypto Hacks in History — https://mediacrypto.ai/news/the-biggest-crypto-hacks-and-collapses-in-history-what-actually-happened

This article is for informational purposes only and does not constitute legal advice. Always consult a qualified professional for jurisdiction-specific guidance.