Tornado Cash Indictment: Founders Charged in $1B Money Laundering Scheme

U.S. Prosecutors Charge Founders of Crypto Mixer in Landmark Case

In a move telegraphing a significant escalation in its crackdown on illicit finance in the digital asset space, the U.S. Department of Justice has unsealed an indictment against the founders of the cryptocurrency mixer Tornado Cash. The **Tornado Cash indictment**, filed in the Southern District of New York, charges Roman Storm and Roman Semenov with conspiracy to commit money laundering, conspiracy to violate sanctions, and conspiracy to operate an unlicensed money transmitting business.

Prosecutors allege the platform facilitated over $1 billion in money laundering transactions, including hundreds of millions of dollars for the Lazarus Group, a sanctioned North Korean cybercrime syndicate. Roman Storm, a 34-year-old naturalized U.S. citizen residing in Washington, was arrested in August 2023. Roman Semenov, a 35-year-old Russian national, remains at large. The case strikes at the heart of the debate over financial privacy and anti-money laundering (AML) responsibilities in decentralized finance (DeFi).

The Allegations: A Hub for Criminal Proceeds

According to the indictment unsealed on August 23, 2023, Storm and Semenov created and operated Tornado Cash, a service designed to obscure the origin and destination of cryptocurrency transactions on the Ethereum blockchain. While proponents frame such tools as essential for privacy, the DOJ alleges the founders knew their platform was a magnet for criminal funds and actively cultivated that business.

Key allegations from the indictment include:

* **Failure to Implement Controls:** The founders allegedly refused to implement Know Your Customer (KYC) or AML programs, as required by U.S. law for money transmitting businesses. This decision was allegedly made despite knowing the service was laundering funds from major crypto hacks and other illicit activities. * **Laundering for Lazarus Group:** The indictment explicitly states Tornado Cash was used to launder over $455 million stolen by the Lazarus Group in the March 2022 hack of the Ronin Bridge, which services the Axie Infinity game. It was also allegedly used to launder proceeds from the $100 million hack of the Harmony Bridge in June 2022. * **Conscious Evasion of Sanctions:** After the U.S. Treasury’s Office of Foreign Assets Control (OFAC) sanctioned the Lazarus Group, the defendants allegedly continued to operate Tornado Cash and facilitate transactions for the group, thereby conspiring to violate U.S. sanctions law. They implemented a sanction screening tool on the front-end user interface but allegedly knew it was ineffective and did little to stop sanctioned wallets from using the underlying smart contracts.

Prosecutors claim that even after OFAC sanctioned Tornado Cash itself as an entity in August 2022, the founders continued to operate the service and pay for its infrastructure.

Challenging the 'Code is Speech' Defense

The **Tornado Cash indictment** directly confronts a central argument within the crypto industry: that developers who write and publish open-source code cannot be held liable for its subsequent use by third parties. The government’s case rests on the assertion that Storm and Semenov did more than just write code; they allegedly operated and marketed a commercial enterprise.

According to the DOJ, the founders controlled the platform, profited from it through the TORN governance token, and made deliberate business decisions to eschew AML compliance to attract illicit users. The indictment cites internal communications where the founders purportedly discussed how to handle large-scale deposits from known hacks and their legal obligations.

This follows the conviction of another Tornado Cash developer, Alexey Pertsev, in the Netherlands. In May 2024, a Dutch court sentenced Pertsev to 64 months in prison for money laundering, finding that he played a key role in running the service. While a separate prosecution, the Dutch verdict reinforces the legal theory that those who operate mixing services can be held criminally liable.

What It Signals

The prosecution of the Tornado Cash founders signals that U.S. authorities are unwilling to accept 'decentralization' or 'code is speech' as absolute defenses against charges of money laundering and sanctions evasion. The DOJ and Treasury are making it clear that if a platform functions as a money transmitter and knowingly facilitates illicit transactions—particularly for sanctioned entities like North Korea—its founders and operators will be held accountable. This case will serve as a crucial legal precedent for liability in the DeFi sector for years to come.

FAQ

What is Tornado Cash? Tornado Cash is a decentralized, non-custodial cryptocurrency mixer that runs on the Ethereum blockchain. It breaks the on-chain link between a source address and a destination address, enhancing transaction privacy by pooling together numerous users' funds before allowing them to be withdrawn to a new address. Regulators allege it is a primary tool for laundering the proceeds of crime.

Who is the Lazarus Group? The Lazarus Group is a state-sponsored cybercrime organization controlled by North Korea (the Democratic People's Republic of Korea, or DPRK). The FBI has attributed numerous high-profile cyber-heists to the group, including the hacks of the Ronin Bridge and Harmony's Horizon Bridge, viewing their activities as a means to fund the North Korean regime and its weapons programs.

Why is the Tornado Cash indictment significant for the crypto industry? The **Tornado Cash indictment** is significant because it is one of the first major U.S. criminal cases against the founders of a decentralized finance (DeFi) protocol for money laundering. It tests the legal boundaries of developer liability and challenges the notion that decentralized platforms are immune from financial regulations like AML and sanctions compliance. The outcome could set a powerful precedent for how DeFi is regulated globally.