Tornado Cash says it's using Chainalysis oracles to block access from OPAC sanctioned addresses

On Friday, Tornado Cash announced that it was using oracle contracts from Chainalysis to block wallet addresses sanctioned by the U.S. Office of Foreign Assets Control, or OFAC. The move comes after the U.S. Department of the Treasury linked North Korean cyber-criminal Lazarus Group as an alleged perpetrator for the recent $600 million+ Ronin bridge exploit. As told by blockchain analytics firm Elliptic, the hackers have sent approximately $80.3 million worth of Ether (ETH) through Tornado Cash. “Maintaining financial privacy is essential to preserving our freedom; however, it should not come at the cost of non-compliance,” said the Tornado Cash team.

Tornado Cash is a popular cryptocurrency mixture used to obfuscate the trail of transactions for privacy. The Chainalysis Sanctions Oracle can validate if a cryptocurrency wallet address has been included in a sanctions designation from the U.S., E.U., or U.N. But Tornado Cash co-founder Roman Semenov later clarified that the instrument only blocks access to the decentralized application, or DApp, interface and not the underlying the smart contract.

There have been traces of Tornado Cash in several controversial decentralized finance activities. In February’s $375 million Wormhole exploit, hackers experimented with Tornado Cash using stolen funds. The same month, the LooksRare team also partly used Tornado Cash to cash out over $30 million in crypto. A recent Rare Bears Discord phishing attack that nabbed $800k in NFTs also involved hackers funneling the stolen funds through Tornado Cash. Reports also emerged that funds from a $33 million Crypto.com exploit were being laundered via the DApp.

However, it appears that Semenov has had enough of the protocol’s association with alleged illicit activities, discussing the potential consequence of jail time for non-compliance with regulators in blocking access to blacklisted individuals.