Tornado Cash might be the most controversial piece of code in crypto history. Governments sanctioned it. Developers went to prison over it. Hackers laundered billions through it. Meanwhile, privacy advocates defend it as essential infrastructure for a free internet.
So what is it actually? And how do crypto mixers work under the hood? In this guide, we break down the technology in plain English, explain who uses mixers and why, and give you an honest answer on whether you should ever touch one.
No agenda, just the full picture. Let’s dive in.
What Is Tornado Cash?
Tornado Cash is a decentralized crypto mixer that runs on Ethereum. Launched in 2019, it lets users deposit crypto into a shared pool and withdraw it later to a completely different address. After that withdrawal, no public link exists between the sending wallet and the receiving wallet.
That’s the entire product. It doesn’t hold your funds like an exchange. No company sits behind a support desk. The protocol consists of immutable smart contracts, meaning nobody can switch them off, not even the people who wrote the code.
Here’s the detail newcomers often miss: blockchains are radically transparent. Every Bitcoin and Ethereum transaction sits on a public ledger, forever, visible to anyone. Your wallet doesn’t show your name, but once someone connects an address to you, they can see everything. Your salary, your savings, your trading history, all of it. Mixers exist to break that visibility.
How Do Crypto Mixers Work?
Time for the core question: how do crypto mixers work in practice? The concept is surprisingly simple. Think of it like a giant cash jar at a party.
Imagine 100 people each drop an identical $10 bill into a jar. Later, each person takes one $10 bill back out. Everyone leaves with the same value they brought. However, nobody can prove which specific bill belongs to whom. The jar broke the link between depositor and withdrawal.
Crypto mixers do exactly this with coins:
- You deposit a fixed amount into a shared pool with hundreds or thousands of other users.
- The pool blends everyone’s funds together into one indistinguishable mass.
- You withdraw the same amount to a fresh address, minus a small fee.
- The trail breaks, because any withdrawal could belong to any depositor.
The privacy strength depends on something called the anonymity set. That’s the number of people in the jar with you. A pool with 10,000 depositors hides you far better than a pool with 12. More users means more noise, and more noise means better privacy.
The Clever Trick Behind Tornado Cash
Tornado Cash refined this model with two smart design choices worth understanding.
First, fixed denominations. You can only deposit set amounts, such as 0.1, 1, 10, or 100 ETH. This matters because unique amounts leak identity. If you deposited exactly 13.37 ETH and someone later withdrew exactly 13.37 ETH, connecting those dots takes about four seconds. Identical deposit sizes make every user look the same.
Second, zero-knowledge proofs. When you deposit, the protocol hands you a secret cryptographic note. When you withdraw, you prove you own a valid note without revealing which one. It’s the mathematical equivalent of proving you put a bill in the jar without pointing at your specific bill. The math checks out, yet the link stays hidden.
Add a waiting period between deposit and withdrawal, plus a fresh wallet on the way out, and the trail goes genuinely cold. Even professional blockchain analysts struggle to reconnect it.
Why Criminals Love Mixers
Now for the uncomfortable part. The same technology that protects privacy also launders stolen money, and the numbers are staggering.
US authorities claim Tornado Cash processed over $1 billion in illicit funds, including hundreds of millions stolen by the Lazarus Group, North Korea’s state-sponsored hacking outfit. Nearly every major hack follows the same script: drain the funds, hop between wallets, then push everything through a mixer before investigators close in.
We watched this play out in real time recently, when the Coldcard hackers sent millions into mixers after the largest hardware wallet exploit in crypto history. Stolen Bitcoin went into Wasabi, stolen Ether went into Tornado Cash, and the victims’ recovery odds dropped toward zero with every transaction.
That’s the brutal reality. Once stolen coins clear a mixer with a deep anonymity set, they are effectively gone. Police reports get filed, and insurance rarely exists. The blockchain remembers everything, except who took your money.
Is Tornado Cash Legal?
Short answer: it’s complicated, and the answer changed multiple times.
In August 2022, the US Treasury sanctioned Tornado Cash entirely, making it illegal for Americans to interact with the protocol. The crypto industry pushed back hard, arguing you can’t sanction open-source code. A US appeals court eventually agreed, and the sanctions came off in March 2025. Treasury has since acknowledged that mixers can serve lawful financial privacy needs.
The developers paid a heavier price. Alexey Pertsev received a prison sentence in the Netherlands, while co-founder Roman Storm faced trial in the US, where a jury convicted him on a money transmitting charge but deadlocked on the more serious money laundering and sanctions counts. We covered the whole saga and what it means for open-source developers in our Tornado Cash founders trial breakdown.
The core legal question remains genuinely unresolved: is writing privacy software a crime if criminals later use it? Courts are still drawing that line, and the answer will shape crypto development for a decade.
My Take: Code Is Law
Here’s where I stand, and I’ve held this view since my earliest days in crypto: code is law. A developer who builds something that criminals later abuse is not guilty of those crimes. Blaming the builder for the user makes as little sense as arresting the inventor of the kitchen knife.
Honestly, that principle is one of the beauties of crypto. The rules are written in code, the code executes exactly as designed, and everyone plays by the same math. Make a mistake, and it’s on you. Send funds to the wrong address, sign a malicious transaction, lose your seed phrase, that responsibility lands nowhere else. Harsh? Sure. But it’s also the fairest system ever built, because nobody gets special treatment and nobody gets bailed out.
As someone born and raised in the Netherlands, the Pertsev case genuinely surprised me. My country arrested a developer for writing open-source software. I never expected the Dutch, of all people, to lead the charge on prosecuting code. Whatever criminals did with Tornado Cash, they made those choices themselves, and the responsibility sits with them. Punishing the author of the tool sets a precedent that should worry every developer in this industry.
The Case for Privacy
Beyond the developer question, the privacy argument itself deserves a fair hearing.
Your bank account is private by default. Nobody can look up your salary or your shopping habits. On a public blockchain, that protection disappears. A transparent ledger means your landlord, your employer, and yes, criminals can potentially trace your entire financial life from a single payment.
That transparency creates real danger. Wrench attacks, where thieves physically target known crypto holders, keep rising every year precisely because on-chain wealth is visible. Legitimate mixer users include activists under authoritarian regimes, businesses hiding payroll from competitors, donors supporting sensitive causes, and regular holders who simply don’t want their net worth public.
Even Ethereum’s co-founder Vitalik Buterin used Tornado Cash, donating to Ukraine while protecting the recipients rather than himself. Privacy and crime are not the same thing, even when they use the same tools.
Support Our Work
If you found this helpful, consider signing up on OKX or Bybit using our referral links. Your support keeps this content free and flowing.
Should You Use a Crypto Mixer?
Despite everything above, my honest advice after thirteen years in this industry: almost certainly not.
The privacy argument is real, but the practical risks outweigh it for regular users. Coins that pass through mixers get flagged by exchange compliance systems constantly. Deposit mixed funds on a major platform, and you risk frozen accounts, closed accounts, and questions you can’t easily answer. Regulators treat mixer exposure as a red flag first and ask questions later. For a normal holder, that’s a terrible trade.
There’s a second problem, too. Fake mixer websites rank among the most common phishing traps in crypto, sitting right alongside the wallet drainer scams we’ve warned about before. Searching for privacy tools is exactly how many people lose everything to a malicious clone site.
If your goal is basic privacy, better options exist. Use fresh addresses, avoid linking your identity to your main wallets, and follow proper operational security. Our guide on claiming airdrops safely covers wallet hygiene habits that protect you without touching regulatory gray zones.
Final Words
Tornado Cash sits at the center of crypto’s hardest question: can you have financial freedom without financial privacy? The technology itself is elegant, a clever mathematical jar that breaks the chain of surveillance built into every public blockchain. What people do with that jar ranges from protecting Ukrainian donations to laundering North Korean hacking proceeds.
Understanding how crypto mixers work matters even if you never use one. When the next big hack hits the headlines and the stolen funds vanish into a mixing pool, you’ll know exactly what happened and why recovery becomes nearly impossible. Knowledge like that keeps you sharper than 95% of the market.
Stay curious, stay private where it counts, and stay far away from anything that puts your exchange accounts at risk. See you next time!
As always, don’t forget to join us on Hyperliquid and save on fees by using our link below.
FAQ
What is Tornado Cash in simple terms?
Tornado Cash is a decentralized privacy tool on Ethereum. Users deposit crypto into a shared pool and withdraw it to a new address, breaking the public link between sender and receiver.
How do crypto mixers work?
Mixers pool funds from many users, blend them together, and let each user withdraw to a fresh address. Since any withdrawal could belong to any depositor, the transaction trail breaks.
Is Tornado Cash illegal?
Using the protocol is no longer sanctioned in the US after the 2022 sanctions were lifted in 2025. However, using any mixer to launder money remains a serious crime everywhere, and legal battles around the developers continue.
Can mixed crypto be traced?
Rarely, if done properly. A large anonymity set, fixed denominations, and time delays make tracing extremely difficult. That said, sloppy usage patterns and timing analysis have exposed careless users before.
Will exchanges accept coins that went through a mixer?
Often not. Major exchanges flag mixer-linked deposits, which can trigger frozen funds and account reviews. This compliance risk is one of the main reasons regular users should avoid mixers.
