What Changed for Tornado Cash After the Sanctions?
Tornadocash is still a functioning privacy protocol, but the end of U.S. sanctions did not make it automatically private, risk-free, or lawful for every user. The practical question is whether its privacy model fits the user’s purpose better than newer tools that offer selective disclosure, cleaner compliance signals, or broader transaction features.
When the concern is whether the protocol still works
It still works at the smart-contract level, but its privacy depends on the pool, the anonymity set, timing, address separation, network metadata, and the user’s handling of the private note. The protocol records a commitment and later verifies a zero-knowledge proof without publishing the secret note, as its technical explanation describes. Tornado Cash’s explanation of its deposit-and-withdrawal model details that flow.
“Privacy is a protocol, not a promise.” — Tornado Cash
A zero-knowledge proof is a cryptographic method that lets one party prove a statement is true without revealing the underlying information; that is the principle used here to prove withdrawal rights without exposing the original deposit. Ethereum’s explanation of zero-knowledge proofs defines the term and its use in private transactions.
If the concern is whether sanctions are still in force
U.S. Treasury announced on 21 March 2025 that it had removed the economic sanctions against the protocol. The same notice warned that U.S. persons should exercise caution around transactions that could benefit malicious cyber actors or North Korea. The Treasury delisting notice is the relevant status update.
That change should not be read as a general legal approval. Sanctions status is only one part of the analysis; tax rules, anti-money-laundering obligations, source-of-funds checks, exchange policies, and local law can still affect a transaction. Anyone handling funds connected to a hack, sanctioned wallet, fraud, or an unexplained source faces a materially different risk from someone seeking ordinary personal financial privacy.
When choosing a privacy tool changes the answer
The right comparison is not “private” versus “public.” It is whether the tool hides a source-and-destination link, supports ongoing private activity, and lets the user demonstrate that funds are not connected to a prohibited source.
| Option | Best privacy model | Selective disclosure | Best fit |
|---|---|---|---|
| Classic fixed-denomination pools | Separates a deposit from a later withdrawal | Limited | Someone who needs a narrow, single-asset privacy transfer and understands operational risks |
| Privacy pools | Separates transfers while supporting clean-set or innocence proofs | Stronger | Someone who needs privacy with a clearer compliance story |
| Stealth addresses | Creates a fresh receiving address for each payment | Possible through viewing or disclosure keys | Someone receiving payments who mainly wants to prevent address reuse |
| Privacy-focused layer 2 networks | Private balances, execution, or application state | Depends on the network | Someone who needs repeated private DeFi or application activity |
Ethereum’s current privacy overview describes mixers as tools that sever the visible link between source and destination, while privacy pools add cryptographic checks around the origin of withdrawn funds. It also identifies stealth addresses and privacy-focused layer 2 networks as different solutions for different privacy problems. Ethereum’s privacy landscape overview explains those distinctions.
So the best fit depends on the requirement. Classic pools are the narrowest tool. Privacy pools fit users who need privacy plus a demonstrable clean-funds story. Stealth addresses fit recurring payments. A privacy-focused layer 2 is the better conceptual match for private applications rather than one isolated transfer.
FAQ for Tornadocash
Does it hide every blockchain trace?
No. Deposits, withdrawals, timing, gas funding, wallet behavior, and network metadata can still create linkable clues.
Can a lost private note be recovered?
Usually no. The note functions like the secret needed to prove withdrawal rights, so losing it can mean losing access.
Is using it legal everywhere?
No. Legality depends on the user’s location, the funds involved, and applicable sanctions, tax, and anti-money-laundering rules.
Is it the best privacy option today?
Not universally. Privacy pools, stealth addresses, and private layer 2 systems may fit better depending on the user’s goal.