Roman Storm, co-founder of the crypto mixer Tornado Cash, was found guilty of conspiring to run an unlicensed money-transmitting business. A Manhattan jury deadlocked on the far more serious counts of money-laundering and sanctions evasion, forcing a partial mistrial. The verdict intensifies the legal debate over open-source responsibility as regulators worldwide eye decentralized finance.
5 KEY POINTS
- Single Conviction: Jury finds Storm guilty under 18 U.S.C. § 1960 for operating an unlicensed money-transmitting business; maximum penalty = 5 years (Source: Reuters).
- Deadlock on Major Counts: Jurors could not agree on conspiracy to launder > $1 billion and conspiracy to violate U.S. sanctions tied to North Korea’s Lazarus Group, triggering a partial mistrial (Source: Reuters).
- Sentencing & Retrial: U.S. District Judge Katherine Failla will sentence Storm; prosecutors may retry the unresolved charges. Storm remains free on bail (Source: CoinDesk).
- Dutch Parallel: Alexey Pertsev, another Tornado Cash developer, was convicted in the Netherlands in May 2024 and sentenced to 64 months for money-laundering (Source: Axios).
- Policy Backdrop: U.S. Treasury sanctioned Tornado Cash in Aug 2022 but lifted the designation in Mar 2025 amid legal challenges and a change of administration (Source: Reuters).
SHORT NARRATIVE
After a three-week trial, a federal jury in Manhattan delivered a split decision on August 6 2025. Roman Storm, 36, was convicted of conspiring to operate Tornado Cash without the required money-transmitter license. The same panel could not reach unanimous agreement on whether Storm also conspired to launder more than $1 billion—allegedly including proceeds from the $500 million Axie Infinity hack attributed to North Korea’s Lazarus Group—or to violate U.S. sanctions. The hung counts were declared a mistrial. Storm, who pleaded not guilty, will be sentenced later this year and says he will appeal (Source: Reuters, The Wall Street Journal).
EXTENDED ANALYSIS
Legal Exposure
Unlicensed Money-Transmitting: The § 1960 conviction confirms that operating or maintaining control over non-custodial smart-contract mixers may still be deemed a money-services business under U.S. law when “instructional” or “operational” ties exist.
Money-Laundering & Sanctions: The mistrial shows the evidentiary hurdle prosecutors face in proving intent to assist designated threat actors. Yet the DOJ can retry. Parallel OFAC enforcement remains a looming threat even after sanctions were lifted, as past activity could still be chargeable.
International Precedent
The Dutch Pertsev judgment underscores EU willingness to criminalize facilitation even when code is open-source. Combined, the U.S. and EU cases are converging on a “developer liability” doctrine that treats code deployers as gatekeepers when reasonable preventive controls are absent.
Operational Implications
Exchanges, OTC desks and DeFi front-ends face heightened exposure when interacting with Tornado-derived funds. The case adds urgency to implementing wallet-screening, chain-analysis risk scoring, and on-chain compliance controls such as privacy pools or zero-knowledge attestations.
Regulatory Trajectory
Post-verdict commentary from the SEC and FinCEN hints at rule-making to clarify licensing thresholds for smart-contract–based mixers. Expect calls for “effective control” tests, mandatory KYC or zero-knowledge compliance proofs, and joint guidance with the Dutch FIU to harmonize EU-U.S. expectations.
ACTIONABLE INSIGHT
Compliance teams should immediately:
- Map direct or indirect exposures to Tornado Cash-tainted assets across custodial and DeFi interfaces.
- Update travel-rule implementation to flag withdrawals linked to high-risk mixer clusters.
- Stress-test sanction-screening engines against potential Lazarus-related heuristics.
- Monitor forthcoming SDNY docket filings: a DOJ notice to retry would reset litigation risk timelines.
CALL FOR INFORMATION
FinTelegram is gathering intelligence on cross-chain bridges, OTC brokers and liquidity pools facilitating post-mixer cash-outs. Share information via our whistleblower platform, Whistle42.
