Introduction: U.S. Treasury Removes Tornado Cash from OFAC Sanctions List
On July 2, 2026, the U.S. Department of Treasury officially announced the removal of Tornado Cash from the Office of Foreign Assets Control (OFAC) sanctions list. Tornado Cash is an Ethereum-based smart contract mixer designed to enhance transaction privacy. The Treasury stated: “Based on the Administration’s review of the novel legal and policy issues raised by use of financial sanctions against financial and commercial activity occurring within evolving technology and legal environments, we have exercised our discretion to remove the economic sanctions against Tornado Cash.” This decision marks a critical turning point in the long-running legal battle between cryptocurrency privacy tools and regulators.
Background of Tornado Cash: From Launch to Sanctions
Tornado Cash was launched in 2019 as a decentralized protocol to provide transaction privacy on Ethereum. However, in August 2022, OFAC placed it on the sanctions list, alleging that the mixer facilitated over $7 billion in money laundering, including funds linked to North Korea's Lazarus Group. U.S. law enforcement claimed that Tornado Cash was extensively used by hackers to obscure the flow of illicit funds. Subsequently, the U.S. banned its citizens from using the service and filed criminal charges against co-founders Roman Storm and Roman Semenov, accusing them of involvement in money laundering tied to over $1 billion in transactions.
In 2023, the two founders were indicted on multiple felony counts. Meanwhile, six Tornado Cash users, backed by Coinbase, sued the Treasury, challenging the legality of the sanctions. This series of events sparked widespread discussion in the crypto community about the legal status of privacy tools.
Legal Challenges and Court Rulings
In January 2025, a Texas federal court issued a landmark ruling: Tornado Cash's smart contracts themselves do not constitute sanctionable “property” or “entities,” therefore OFAC’s sanctions exceeded statutory authority. In November 2025, the Fifth Circuit Court of Appeals upheld that decision, further affirming the legal principle that smart contracts cannot be sanctioned. These two rulings laid the foundation for the Treasury’s eventual removal of sanctions.
In its July 2026 filing, the Treasury explicitly stated that the removal was based on a reassessment of “novel legal and policy issues” in the context of rapidly evolving technology. Although the Treasury lifted sanctions on Tornado Cash, it did not admit any wrongdoing, emphasizing that it retains the authority to take regulatory action against similar tools in the future.
Post-Sanction Tensions and Continued Focus on DPRK
Despite the removal of Tornado Cash sanctions, the Treasury reiterated its strong stance against North Korea (DPRK)-related hacking and money laundering. The Treasury stated: “We remain deeply concerned about the significant state-sponsored hacking and money laundering campaign aimed at stealing, acquiring, and deploying digital assets for the Democratic People’s Republic of Korea (DPRK) and the Kim regime.” The recent $1 billion+ hack on Bybit exchange, believed to be executed by the Lazarus Group, has further heightened geopolitical tensions.
Secretary of the Treasury Scott Bessent commented: “Digital assets present enormous opportunities for innovation and value creation for the American people. Securing the digital asset industry from abuse by North Korea and other illicit actors is essential to establishing U.S. leadership and ensuring that the American people can benefit from financial innovation and inclusion.” He also warned U.S. citizens to exercise caution when engaging in transactions that may present such risks.
Implications for the Crypto Industry and Outlook
The lifting of sanctions is undoubtedly a positive signal for financial privacy software developers and the decentralized protocol community. However, ongoing lawsuits against developers of Samurai Wallet remain unresolved, and it is unclear whether the Tornado Cash ruling will directly influence those cases. Overall, this decision may accelerate the push for clearer legal definitions of smart contracts and encourage regulators to adopt more precise enforcement methods.
The broader Bitcoin and crypto industry is still in a wait-and-see mode. On one hand, privacy tools have gained temporary breathing room; on the other, the Treasury’s hardline stance against North Korean hackers shows that the crackdown on illicit crypto activities will not ease. Going forward, developers must balance privacy and compliance, while legislators may expedite the creation of specific regulations for DeFi and mixers.