Can OFAC sanction a crypto protocol?

Yes — Tornado Cash established that crypto protocols are not exempt from OFAC designation. OFAC designated the protocol's smart contract addresses, and US persons are prohibited from interacting with them. This precedent applies to any protocol, decentralized or not.