The U.S. Treasury announced the sanctions against the popular virtual currency mixer on Monday, stating it has been used to launder more than $7 billion for cybercriminals since its founding in 2019.
Of the cryptocurrency the United States said it laundered includes hundreds of millions stolen by the Lazarus Group, a North Korean state-sponsored hacking organization that was responsible for the largest known currency heist of some $620 million in Etherum reported on March 29.
“Despite public assurances otherwise, Tornado Cash has repeatedly failed to impose effective controls designed to stop it from laundering funds for malicious cyberactors on a regular basis and without basic measures to address its risks,” Brian Nelson, under secretary of the Treasury for Terrorism and Financial intelligence, said in a statement.
Virtual currency mixers receive a variety of transactions and mix them together before transmitting them to their individual recipients in order to increase privacy. Such services are popular among cyber criminals in order to launder their ill-gotten proceeds.
The Treasury said Tornado Cash was used by the North Korean hackers to launder more than $455 million of the money they stole in late March as well as about $96 million of the $100 million they stole from the Horizon Bridge crypto transfer service heist in late June and at least $7.8 million they stole early this month from cryptocurrency bridge provider Nomad.
The sanctions announced Monday prohibit U.S. persons from doing business with Tornado Cash.