Can You Still Use Tornado Cash in 2026?

The U.S. Treasury lifted Tornado Cash protocol sanctions on 21 March 2025. The contracts can still run onchain. In August 2026, reports of bookmark phishing showed that opening a familiar domain is not the same as using it safely. So can you still use Tornado Cash? Narrowly, the protocol still processes deposits and withdrawals on public chains. That fact does not answer whether you still have a clean entry, a trustworthy front end, or a transaction history exchanges will accept.

Key Takeaway: Treat "still usable" as four separate questions: law in your jurisdiction, live contracts and pool TVL, authenticity of whatever UI you open, and how a later exchange deposit will look. Protocol delisting removed one U.S. SDN label from the tool. It did not rewrite your personal risk, and it did not turn a guilty developer verdict into a retail license.

Can you still use it: four layers

People asking whether Tornado Cash still works usually want one yes-or-no. Markets do not sell that answer. Split the question before you answer it.

Law. On 21 March 2025 the U.S. Department of the Treasury said it had removed economic sanctions against Tornado Cash, reflecting its filing in Van Loon v. Department of the Treasury (U.S. Treasury, March 2025). That action matters. It is not a global permission slip. Other countries keep their own AML and Travel Rule rules for crypto-asset service providers. Individuals still sit under local criminal and civil law. If you are a U.S. person, Treasury's own delisting note still told people to exercise caution on transactions that may benefit malicious cyber actors or the DPRK. Delisting is not a blessing.

Chain. As of 31 August 2026, DefiLlama showed Tornado Cash total value locked near $730 million, mostly on Ethereum. Live TVL means the pools still hold assets and the contracts still receive calls. It does not prove that any particular website, mirror, or bookmark is the interface you think it is.

Front end. Mixers are famous for dying in the browser long before the bytecode dies. August 2026 bookmark-phishing reports exist for a reason: users typed a familiar name and still landed somewhere hostile. Domain registration records for tornado.cash show a registration dated 25 March 2025 and later changes in 2026 (RDAP). Those dates support caution about bookmarks. They do not, by themselves, prove a "hijack" story as a closed forensic case. Write the risk as operational: do not treat a remembered URL as a safety feature.

Exchange card. Even when the law and the chain look quieter than in 2022, many centralized venues still screen deposits that touch mixer history. Holding TORN on a listing is one story. Moving funds that interacted with the pool onto a KYC exchange is another. Collapsing those stories is how people get surprised at withdrawal time.

If all four layers are green for your situation, "still works" is a careful yes. If any layer is red, the honest answer is no — or not for you — even while TVL stays large.

The contract can still run. That is not your entry

After the 2022 OFAC designations, a popular shortcut appeared online: if the contracts are immutable and still callable, the product "still works." That sentence is half true and operationally dangerous.

Bytecode that cannot be deleted is not a product experience. A product experience needs an interface that does not steal notes, a network path that does not leak more than you intended, and a mental model of what you will do with the funds afterward. When those pieces rot, the contract can look "alive" on a block explorer while every practical entry for a normal user is compromised.

The Fifth Circuit's Van Loon opinion on 26 November 2024 held that certain immutable smart contracts were not "property" under IEEPA in the way OFAC had treated them (U.S. Court of Appeals for the Fifth Circuit, November 2024). That legal distinction helped the delisting path. It did not invent a consumer-grade support desk for Tornado Cash. It did not audit mirrors. It did not clear deposit screening policies at exchanges.

So when someone says "Tornado Cash still works," ask which object they mean. If they mean the pool contracts, DefiLlama's TVL is a fair exhibit. If they mean "I can safely open the site I bookmarked in 2021," August 2026 reporting is a fair counter-exhibit. Those are different sentences. Native English speakers confuse them because both use the verb use. Traders should not.

August 2026 bookmark reports: 810 ETH vs headlines saying 1010

In mid-August 2026, crypto media covered a phishing wave tied to Tornado Cash bookmarks and lookalike entry points. On-chain summaries commonly cite about 810 ETH across a small set of transactions into a reported collection address. Some headlines round the same episode toward about 1,010 ETH.

Use the smaller, better-sourced figure when you need a number. Treat the larger headline as a media upper band until a single invoice closes the gap. Inflating the number does not make the lesson sharper. The lesson is already sharp: familiarity is not authentication.

This section is not a recovery guide and not a list of "safe" alternative interfaces. The editorial point is narrower. If your only reason for believing Tornado Cash is still usable is "I opened the same link as last year," that reason failed in public in August 2026. People lost ETH while chasing privacy. That is the second-order cost the "still works" crowd underprices.

Protocol delisting does not relabel your transaction

The March 2025 delisting removed Tornado Cash as a protocol designation from the SDN posture Treasury chose to reverse. Roman Semenov remained a designated person on the OFAC side of the same period's actions. Person and protocol are not the same row in the spreadsheet. Mixing them produces fake comfort.

Even for the protocol row, delisting answers a specific question: whether that SDN label still attaches to the tool under U.S. sanctions law as of that Treasury action. It does not answer:

• whether your past mixer interaction will clear a bank or exchange compliance review in 2026;
• whether your local regulator treats mixer use as a red flag;
• whether a future administration could reverse course again;
• whether privacy tooling remains commercially radioactive even when legally quieter.

Chain analysis firms and compliance desks score histories, not press releases. A transaction that touched a mixer pool in 2023 does not become "never touched a mixer" because Treasury published sb0057 in 2025. The ledger does not rewrite. Policy did.

If you need the longer court-and-sanctions arc — 2022 designation, Dutch sentencing of Alexey Pertsev in May 2024, the Fifth Circuit path, then delisting — read the companion legal landscape piece rather than treating this decision article as a full casebook.

One Storm guilty count is not a user license

Roman Storm's U.S. criminal case is another place where people smuggle a retail permission into a developer verdict. On 6 August 2025, reporting on the Southern District of New York trial described a guilty finding on a conspiracy count tied to operating as an unlicensed money transmitter, with other counts hung. By late August 2026, coverage of the docket pointed to a retrial date adjourned into 26 April 2027.

That timeline matters for Tornado Cash's governance and for anyone who funded, staffed, or marketed the project. It is weak evidence for the search query "can I still use it." A jury outcome about a founder's alleged money-transmission conspiracy is not a user FAQ answer. Hung counts are not a green light either. They are unfinished criminal procedure.

If your personal question is "will I face the same case as Storm," talk to counsel in your jurisdiction. This article will not role-play that advice. The editorial boundary is simpler: do not translate "developer convicted on one count" into "users may proceed." Those are different defendants, different elements, different facts.

Holding TORN vs touching the pool vs depositing to an exchange

Three activities get mashed into one ticker narrative.

Holding TORN. The token is a governance and speculation instrument. Price pages and listing status change over time. Spot exposure to TORN is not proof you ever used the mixer. It can still be a compliance conversation at some venues, and liquidity can be thin after years of delistings, but it is not the same act as depositing ETH into a pool.

Touching the pool. Interacting with the mixer contracts is the privacy product. That is the act most people mean by "using Tornado Cash." It carries the front-end authenticity problem, the AML stigma problem, and — depending on who you are and where you live — the legal problem. This article does not provide steps for that interaction.

Depositing to an exchange afterward. Moving funds with mixer history onto a centralized venue is often where retail pain shows up as frozen deposits or endless questionnaires. Exchange policy can stay strict after sovereign sanctions soften. Markets price that friction even when Twitter celebrates delisting.

If you only hold TORN, your decision tree looks like any other illiquid governance token with regulatory baggage. If you plan to use the pool, your decision tree is YMYL-heavy and should start with law and UI authenticity, not with DefiLlama. If you already used the pool and now want to cash out on a CEX, your decision tree is compliance documentation, not "is TVL still high."

Who should stop here vs who should read the legal landscape piece

Stop here if you came for a binary answer and now see why the binary is fake. For most readers, the practical decision is: do not treat live contracts plus a March 2025 press release as a personal green light, and do not open bookmarked mixer URLs as if nostalgia were a security control.

Keep reading the longer legal piece if you need the sanctions timeline, court holdings, and safety framing in one place: The Legal Landscape of Tornado Cash (TORN): Is It Safe to Use?. That URL already carries traffic for the legal-and-safety intent. This article owns the "还能用吗 / can you still use" intent. They should point at each other, not collide.

Skip both if what you actually wanted was a deposit tutorial. OneBullEx is not a mixer, and this Opinion page will not become one.

Key Takeaways

• Answer "can you still use Tornado Cash" in four layers: law, chain, front end, exchange screening.
• Live TVL near $730M on 31 August 2026 (DefiLlama) proves pools still hold value. It does not prove your bookmark is safe.
• Treasury's 21 March 2025 delisting removed a protocol SDN posture. It did not clean historical mixer traces or create a retail license.
• August 2026 phishing coverage is a caution about entry authenticity. Prefer the ~810 ETH on-chain band over unreconciled ~1010 ETH headlines.
• Storm's partial guilty outcome and a 2027 retrial date are developer-case facts, not a user FAQ answer.
• Holding TORN, using the pool, and depositing to a CEX are three different risk stacks. Do not trade them as synonyms.

Frequently Asked Questions

Is Tornado Cash still sanctioned in the United States?

As of Treasury's 21 March 2025 announcement, the United States removed economic sanctions against the Tornado Cash protocol as reflected in the Van Loon litigation posture. That is not the same as saying every related person is clear, and it is not advice for non-U.S. law. Check current OFAC lists for named individuals and get local counsel for your own facts.

If the smart contracts are live, am I allowed to use them?

Live contracts show technical possibility. Permission is a legal and compliance question that depends on who you are, where you live, and what you do with the funds afterward. TVL and block-explorer activity cannot answer "allowed."

Did phishing in August 2026 prove the tornado.cash domain was hijacked?

Public reports showed users losing ETH through bookmark and lookalike entry points, with on-chain summaries often citing about 810 ETH. Domain registration records show a 2025 registration date and later updates. Those facts support phishing caution. They do not, alone, close a courtroom-grade "hijack" finding. Treat the operational risk as real either way.

Does holding TORN mean I used the mixer?

No. TORN is a token. Using the mixer means interacting with the pool contracts. Exchanges and analysts may still ask questions about either activity, but they are not identical.

Where should I read the longer legal timeline?

For sanctions history, court holdings, and the broader "is it safe" framing, use The Legal Landscape of Tornado Cash (TORN): Is It Safe to Use?. Use this page when the question is whether "still running" equals "still usable for me."

Related reading

The Legal Landscape of Tornado Cash (TORN): Is It Safe to Use?

Tornado Cash (TORN) Price Predictions

Tornado Cash vs Privacy Coins: Anonymity Comparison

Tornado Cash vs Monero and Zcash

Tornado Cash Token Insights

Tornado Cash Deep Dive

Risk disclosure

This article is for educational discussion only. It is not legal advice, not compliance advice, and not an invitation to use a mixer or to evade sanctions, AML rules, or exchange policies. Tornado Cash and TORN involve elevated regulatory and operational risk. Digital-asset values can go to zero. Past court or Treasury actions can be reversed or reinterpreted. Verify primary sources and consult qualified counsel in your jurisdiction before acting. OneBullEx does not operate Tornado Cash and does not provide mixer services.