In a landmark decision, a U.S. federal appeals court has ruled that the Treasury Department exceeded its authority by imposing sanctions on Tornado Cash, a cryptocurrency mixer accused of facilitating illicit transactions. The ruling overturns a 2022 decision by the U.S. District Court for the Western District of Texas that upheld sanctions imposed by the Treasury’s Office of Foreign Assets Control (OFAC). These sanctions targeted Tornado Cash for allegedly being used to launder $455 million stolen by North Korea’s Lazarus Group.
The case was brought forward by six Tornado Cash users and supported by Coinbase, the cryptocurrency trading platform. The plaintiffs argued that the government’s sanctions exceeded its regulatory powers, particularly by targeting Tornado Cash’s immutable smart contracts—autonomous lines of code on the blockchain used to preserve transaction anonymity.
Smart Contracts Ruled as Non-Property
The court’s decision hinged on the interpretation of Tornado Cash’s smart contracts. These smart contracts pool and mix users’ cryptocurrency to obscure the origins of transactions. Judge Don Willett, writing for the 5th U.S. Circuit Court of Appeals, concluded that these lines of code do not constitute “property” under the International Emergency Economic Powers Act (IEEPA), a 1977 law granting the executive branch authority to block assets of foreign actors posing national security threats.
“OFAC’s concerns with illicit foreign actors laundering funds are undeniably legitimate,” Judge Willett wrote. “However, Tornado Cash’s immutable smart contracts are not the property of a foreign national or entity and, therefore, cannot be blocked under IEEPA.”
Judge Willett acknowledged that Congress may need to revisit IEEPA to address emerging technologies like cryptocurrency mixers. Until then, the court found that OFAC’s actions against Tornado Cash exceeded its congressionally granted authority.
Coinbase Hails Decision as a Victory for Crypto
Paul Grewal, Coinbase’s chief legal officer, called the decision a “historic win for crypto” and highlighted its broader implications for open-source technology.
“No one wants criminals to use crypto protocols,” Grewal wrote on social media, “but blocking open-source technology entirely because a small portion of users are bad actors is not what Congress authorized.”
Tornado Cash and Broader Crypto Sanctions
The federal government has increasingly targeted cryptocurrency infrastructure linked to cybercrime and illicit activity. Tornado Cash has been at the center of these efforts, with OFAC alleging that its platform has been exploited by hackers and cybercriminals, including North Korea’s Lazarus Group.
Two Tornado Cash founders, Roman Semenov and Roman Storm, were charged last year with money laundering and sanctions violations, while a Tornado Cash developer, Alexey Pertsev, was sentenced to over five years in prison in the Netherlands for money laundering.
The case underscores the challenges regulators face in addressing the dual-use nature of cryptocurrency technology. While tools like Tornado Cash offer privacy and security for legitimate users, they are also vulnerable to exploitation by bad actors.
Future Implications
The court’s decision represents a significant setback for government agencies seeking to curb cybercrime by targeting cryptocurrency platforms. However, it also highlights the tension between regulatory efforts and the protection of open-source technology and user privacy.
Judge Willett’s ruling suggests that while combating illicit use of cryptocurrency is a legitimate goal, regulatory actions must remain within the scope of existing laws. The ruling may prompt Congress to revisit IEEPA or craft new legislation tailored to address emerging challenges in the cryptocurrency landscape.
As the battle between privacy advocates, cryptocurrency platforms, and regulators continues, this case serves as a defining moment in the debate over how to balance innovation, privacy, and security in the digital age.

