Tornado Cash Review 2026: Privacy Protocol and Legal Risk

Tornado Cash is a decentralized protocol for private transactions on Ethereum. DefiLlama files it under Privacy and describes it as non-custodial anonymous transactions. The homepage says it runs on Ethereum, BNB Chain, Optimism, Polygon, Avalanche, Arbitrum and Gnosis.

DefiLlama shows roughly 835 million dollars in TVL, up 2.8 percent over seven days, and lists the TORN token and two audits. DefiLlama also tracks Ethereum Classic alongside the other seven networks.

The project is best known for its legal history. Public reporting describes it as a mixer sanctioned for allegedly facilitating money laundering. Later reports say the US Treasury's OFAC lifted the sanctions in March 2025, and one headline refers to a Fifth Circuit ruling that OFAC overstepped. Readers should treat the legal picture as something to verify locally, since this page does not give legal advice.

Tornado Cash is a set of smart contracts that let users deposit crypto from one address and later withdraw it to a different address, without an on-chain link between the two. Funds from many users sit together in a shared pool, so an outside observer cannot easily tell which withdrawal belongs to which deposit.

The protocol is described as non-custodial. Users keep control through their own wallets and cryptographic proofs rather than handing assets to a company. The homepage describes it as fully decentralized and private, running on Ethereum and several other networks.

Privacy depends partly on user behavior. Withdrawing instantly, reusing addresses or sending to an address tied to your identity can weaken the protection the pool provides.

Fees are not published publicly reviewed for this page. DefiLlama does not list a protocol fee, and its homepage available is minimal.

In general, users of this kind of protocol pay network gas fees on the chain they use, and may pay a fee to a relayer if they use one. Check the interface and official documentation for the actual amounts before confirming any transaction.

DefiLlama lists two audits, but public sources reviewed do not say who performed them or what they found. Smart-contract risk is always present, and a non-custodial protocol offers no customer support or reversals if something goes wrong.

Regulatory risk is the main concern. Public reporting says Tornado Cash was sanctioned over alleged money-laundering facilitation, that OFAC removed the sanctions in March 2025, and that a court ruling went against OFAC's earlier action. Laws and enforcement priorities differ by country and can change, so users should check local rules and the policies of any exchange they use. Also watch for fake sites, since this product has attracted impersonators.

This review is for readers who already know how self-custody wallets and gas fees work and have a legitimate reason to want on-chain privacy. It is not for anyone who is unsure about the rules where they live or who relies on exchanges that may question mixer-linked funds.