By SanctionsAI team · Updated 2026-08-09

Tornado Cash designation case study (2022)

On August 8, 2022, OFAC designated Tornado Cash, making it the first time OFAC sanctioned an immutable smart contract protocol. This case reshaped the compliance landscape for DeFi.

Background

Tornado Cash was a decentralized, non-custodial crypto mixer on Ethereum. Users deposited ETH and withdrew to new addresses, breaking the on-chain link between sender and receiver. The protocol was immutable: no admin key, no upgrade mechanism.

Why OFAC designated it

OFAC designated Tornado Cash under the North Korea sanctions program because the Lazarus Group used it to launder approximately $455 million in illicit proceeds, including funds from the $620 million Ronin Bridge hack.

The legal challenge

In November 2024, the Fifth Circuit Court of Appeals ruled that OFAC exceeded its authority by designating Tornado Cash's immutable smart contract code. The court held that immutable code is not 'property' under IEEPA. However, the designation remains a watershed moment for DeFi compliance.

AspectDetail
Designation dateAugust 8, 2022
Legal basisNorth Korea sanctions program (NKSPEA)
ReasonLazarus Group used it to launder $455M+
Fifth Circuit rulingNovember 2024: OFAC exceeded authority for immutable contracts
Compliance implication: Despite the Fifth Circuit ruling, the Tornado Cash case established that OFAC is willing to target DeFi infrastructure. DeFi protocols should implement wallet screening.

Screen your agent's next payment

Check any wallet, name, or entity against OFAC, EU, UN sanctions lists in real time.

Free wallet checker

Frequently Asked Questions

Why was Tornado Cash designated?
OFAC designated it in August 2022 under the DPRK sanctions program because the Lazarus Group used it to launder $455M+ in stolen crypto, including from the Ronin Bridge hack.
Was the designation overturned?
The Fifth Circuit ruled in November 2024 that OFAC exceeded its authority for immutable contracts. However, the legal landscape continues to evolve.
What does Tornado Cash mean for DeFi?
It established that OFAC is willing to target DeFi infrastructure. DeFi protocols should implement front-end wallet screening to block designated addresses.
Is interacting with Tornado Cash still risky?
Yes. Despite the Fifth Circuit ruling, the legal landscape is evolving. US persons should consult OFAC counsel before interacting with previously designated addresses.

← Back to case-studies · SanctionsAI