DOJ Charges Tornado Cash Founders in $1 Billion Crypto Mixing Case

US Charges Tornado Cash Founders with Money Laundering and Sanctions Violations

NEW YORK – The U.S. Department of Justice has charged two founders of the Tornado Cash cryptocurrency mixer, Roman Storm and Roman Semenov, with conspiracy to commit money laundering and conspiracy to violate sanctions in an indictment unsealed in the Southern District of New York.

Federal prosecutors allege the platform facilitated over $1 billion in illicit transactions, including hundreds of millions of dollars for the Lazarus Group, a sanctioned North Korean cybercrime organization. The indictment, dated August 23, 2023, marked a significant escalation in U.S. regulatory efforts to police the cryptocurrency ecosystem. Roman Storm, a U.S. citizen, was arrested in Washington state, while Roman Semenov, a Russian national, remains at large. A third co-founder, Alexey Pertsev, was previously arrested in the Netherlands in August 2022 on related charges.

According to the indictment (Case 1:23-cr-00430), the **Tornado Cash founders charged** in the case created, operated, and promoted a cryptocurrency service that knowingly enabled criminals and sanctioned entities to obscure the trail of their funds. Attorney General Merrick B. Garland stated that the defendants operated Tornado Cash as a haven for criminals to launder funds, despite being aware of these illicit transactions.

The Charges in Detail

The core allegations against Storm and Semenov include:

* **Conspiracy to Commit Money Laundering:** The DOJ claims the founders knew they were laundering proceeds from criminal activities, such as hacks of other crypto exchanges. Prosecutors state that from 2019 to 2022, Tornado Cash was used to launder more than $1 billion. * **Conspiracy to Violate Sanctions:** The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned the Lazarus Group in 2019. The indictment alleges that Tornado Cash was used to launder approximately $455 million in stolen cryptocurrency for the Lazarus Group following a massive hack of a crypto bridge in March 2022. The founders are accused of continuing to operate the service and facilitate these transactions despite knowing of their origin. * **Conspiracy to Operate an Unlicensed Money Transmitting Business:** The DOJ asserts that Tornado Cash failed to register with the Financial Crimes Enforcement Network (FinCEN) and did not implement required Anti-Money Laundering (AML) or Know-Your-Customer (KYC) programs.

The indictment highlights internal communications where the founders allegedly discussed how to maintain the appearance of compliance while continuing to profit from the mixer's operations. Prosecutors claim that even after implementing a sanctions screening tool, they designed it to be ineffective and publicly touted it as a sign of compliance.

Link to OFAC Sanctions and Crypto Mixer Operations

The indictment followed OFAC's decision in August 2022 to add Tornado Cash itself to the Specially Designated Nationals (SDN) list, effectively banning U.S. persons and entities from interacting with it. The Treasury Department stated at the time that Tornado Cash had "repeatedly failed to impose effective controls designed to stop it from laundering funds for malicious cyber actors."

Cryptocurrency mixers, also known as tumblers, are designed to enhance privacy by pooling digital assets from multiple users and mixing them before redistributing them to their destination addresses. While they have legitimate privacy applications, law enforcement agencies argue they are a primary tool for money laundering in the digital age. The Tornado Cash service operated as a set of smart contracts on the Ethereum blockchain, which made it decentralized and, its creators argued, beyond their direct control once launched.

What the Tornado Cash Case Means for Crypto

The prosecution of the **Tornado Cash founders charged** in this case represents a critical test for the principle of developer liability. The defense for Roman Storm argues that he and his colleagues merely wrote and published open-source code and are not responsible for how others used it. This argument is central to a broader debate within the technology and cryptocurrency industries about whether developers can be held criminally liable for the use of their software.

U.S. Attorney for the Southern District of New York, Damian Williams, rejected this view in a public statement, asserting that "writing code is not a license to build a billion-dollar criminal enterprise." The outcome of this case could establish a significant legal precedent, potentially influencing how decentralized finance (DeFi) protocols and privacy-enhancing technologies are developed and regulated in the future. For compliance officers and financial institutions, it underscores the severe legal risks associated with services that lack robust AML and sanctions compliance frameworks, regardless of their technological structure.