Common vs Tornado Cash: privacy, scale and legal risk (2026)

Both protocols aim to make the on-chain link between a sending address and a receiving address harder to see, and both are described as non-custodial. Common centers on a shielder contract: connect an existing EVM wallet, deposit, then withdraw to a fresh address. It also offers TraceBreaker and says users can shield stablecoins such as USDT and USDC, with a yield option.

Tornado Cash is the much larger and more widely deployed protocol by the listed TVL: about $834.6 million compared with Common’s roughly $1,672. It is listed across eight networks, while Common is live on Arbitrum and Aleph Zero EVM. Scale does not guarantee privacy or safety, but Common’s low TVL may mean a thinner anonymity set. Tornado’s greater reach comes with a more significant legal and practical risk profile.

Neither project publishes a fee schedule. Common says users can pay fees in the token they are shielding, so they do not need the native gas token for that payment. Its network transactions still incur the relevant on-chain fees, and any shielding, withdrawal or yield-related charges should be checked in the app before confirming.

Tornado Cash also has no published fee amount here. Network gas applies when interacting with a protocol of this kind, and a relayer may charge a fee if one is used. The actual amounts can depend on the network and transaction. Do not assume either protocol is cheaper based on the information published; compare the charges shown by the interface before proceeding. Common’s token-payment option is a convenience, not proof that its overall transaction costs are lower.

Common says its apps were audited by Kudelski Security and zkSecurity, but it does not make the reports available for checking their scope or findings. DefiLlama lists zero audits, so the audit picture is not fully consistent. Tornado Cash has two audits listed, but the auditors and findings are not specified. Audits can help identify issues, but they do not remove smart-contract risk.

Common describes itself as non-custodial, but its shielder contract holds pooled user funds. Tornado Cash is also non-custodial, and its contracts are described as immutable; there is no support desk or way to reverse a mistaken transaction. Privacy depends on user behavior too: reusing addresses or moving funds in obvious patterns can weaken it. Common’s very low TVL may also limit its anonymity set. Tornado Cash carries additional legal and service-policy risks because of its sanctions history. Check local laws and relevant service policies before using either protocol.

Choose Common if you value a straightforward connect, deposit and withdraw flow, want the option to pay fees in the asset being shielded, or are interested in its stablecoin features. Be realistic about its small TVL, early stage, limited live network coverage and unavailable audit reports. Its mobile app is still at the waitlist stage.

Choose Tornado Cash if broad chain support and a much larger listed TVL matter more to you than a simpler onboarding experience. Its ease-of-use score is lower, and its history can lead exchanges, wallets or other services to scrutinize funds associated with a mixer. Sanctions were reported lifted in March 2025, but the legal situation and service policies may vary and change. Neither protocol publishes fees, so check costs before confirming a transaction.