Tornado Cash crackdown by Treasury punishes honest crypto investors

The Treasury Department’s crackdown on Tornado Cash was meant to stop criminals. But a lot of ordinary crypto investors with honest intentions are now at risk.

“Every U.S. person is going to have to be very careful about transacting with Tornado Cash,” said Ari Redbord, head of legal and government affairs at research firm TRM Labs, in an interview. “Remember, sanctions are strict liability. Intent does not matter.”

Tornado Cash is used by some people as a legitimate way to protect their privacy in the still nascent crypto market. When a buyer pays for something using a crypto wallet, the recipient of the transfer has access to the purchaser’s public crypto wallet, showing account details and history.

Using a crypto mixing service like Tornado Cash masks those details by anonymizing the funds and concealing the identity of the buyer.

“There is a need for solutions that can help you cover your tracks, even when you’re not doing anything illicit,” said Tom Robinson, chief scientist for blockchain analytics firm Elliptic. 

In blacklisting Tornado Cash on Thursday, the Treasury Department said it was going after criminals, who used the service to launder more than $7 billion worth of virtual currency since it launched in 2019.

Even though the goal of these sanctions by the Treasury’s Office of Foreign Assets Control (OFAC) is to block a state like North Korea from converting illicit crypto funds into more usable traditional currencies to fund weapons proliferation, the knock-on effect to everyday investors will be harsh, experts told CNBC.

In the past, OFAC has placed cryptocurrency wallet addresses on its “Specially Designated Nationals list.” Now the Treasury is targeting the address of a smart contract that enables people to maintain their own personal privacy, according to Peter Van Valkenburgh, director of research at Coin Center, a non-profit cryptocurrency think tank.

“That is fundamentally different, because now you’re not targeting a particular person who is a known terrorist or member of an enemy state,” said Van Valkenburgh. “You’re targeting a piece of software that exists on a peer-to-peer network on the internet.”

OFAC is somewhat of a nuclear option when it comes to financial controls, according to Van Valkenburgh. He said it’s more commonly used to identify “a supporter of terrorism or a leader in an enemy state.”

Jake Chervinsky, head of policy at the Blockchain Association, said this action marks a departure from precedent for the U.S. Treasury, which for years, has “carefully distinguished bad actors from the neutral tools” and “technology that they (plus everyone else in the world) are able to use.”

Elliptic says there’s also a gap between the Treasury’s data and its own calculations. Elliptic found that at least $1.5 billion in proceeds from crimes such as ransomware, hacks and fraud have been laundered…