What Happened
On March 10, 2026, federal prosecutors in the Southern District of New York asked Judge Katherine Polk Failla to schedule an October retrial for Roman Storm, co-founder of Tornado Cash, on two counts that a jury could not resolve in August 2025: conspiracy to commit money laundering and conspiracy to violate the International Emergency Economic Powers Act (IEEPA) through sanctions violations. The proposed dates are October 5 or 12. Storm's defense team confirmed availability for a three-week trial in late September, early October, or early December, while arguing that scheduling a retrial is premature given a pending motion for acquittal. Oral arguments on that motion are set for April 9.
The context for this development is a policy contradiction that Storm himself highlighted on social media after the DOJ filing. Six days before the retrial request, on March 9, the US Treasury submitted a report to Congress under the GENIUS Act explicitly acknowledging that lawful users of digital assets may use mixers to protect financial privacy on public blockchains. Treasury gave ordinary examples: shielding personal wealth, business payments, charitable donations, and consumer spending from full public view. Storm wrote that the government's response to a jury that deadlocked on whether writing code should be a crime is to try again, while the Treasury simultaneously tells Congress that what his code enabled is lawful.
What Tornado Cash Was and How the Prosecution Frames It
Tornado Cash is a set of smart contracts deployed on the Ethereum blockchain in 2019 that allow users to deposit cryptocurrency and withdraw an equivalent amount to a different address, breaking the on-chain link between sender and receiver. The contracts used zero-knowledge proofs, a cryptographic technique that allows verification of a deposit without revealing which deposit is being withdrawn. Storm and his co-founders burned the administrative keys to the mixing pools after deployment, rendering themselves unable to modify the contracts, block users, or reverse transactions.
The DOJ's prosecution theory does not require that Storm controlled or directed specific transactions. The charge is conspiracy: that Storm knew criminals, including North Korea's Lazarus Group, were using Tornado Cash to launder stolen funds; that he continued operating the service's front-end website, holding governance tokens, and maintaining technical infrastructure with that knowledge; and that he profited from the platform's operation. The government argues that knowing your tool is being used to launder over $1 billion in criminal proceeds and continuing to run adjacent infrastructure is sufficient for criminal conspiracy, regardless of whether you had control over the underlying contracts.
Storm's defense argument is the structural counter: Tornado Cash is neutral software. Once the keys were burned, no person could control or prevent its use. Holding the developer criminally liable for third-party use of immutable code would mean that any open-source software developer whose tool is misused faces criminal exposure. The jury agreed with this framing on the money laundering and sanctions counts, deadlocking on both. It convicted on the unlicensed money transmitter count, finding that Storm did operate a money transmitting business by running infrastructure around the protocol even if he did not control the protocol itself.
Why This Matters for Bitcoin Privacy Tools
Tornado Cash operates on Ethereum. But the legal theory the DOJ is pursuing is not Ethereum-specific. It is a theory about what obligations software developers have when their tools are used for illicit purposes, and what liability follows when those developers know about the misuse and continue operating adjacent services.
Bitcoin privacy tools occupy the same legal territory. CoinJoin, the technique implemented in Wasabi Wallet, Sparrow's STONEWALL, and PayJoin, breaks transaction graph linkability by combining multiple users' inputs and outputs into a single transaction. The developers of those tools do not take custody of user funds. The protocols are non-custodial. The tools are open-source. And if the DOJ's prosecution theory survives the retrial and any subsequent appeal, the question of whether running infrastructure around a non-custodial Bitcoin privacy tool constitutes operating an unlicensed money transmitting business will be substantially less settled than it was before Storm's case.
The March 9 Treasury report creates the most useful contrast. Treasury's language distinguished between custodial mixers, which pool funds under operator control, and non-custodial protocols, where users control their own keys throughout. The report's acknowledgment that lawful users may rely on non-custodial privacy tools is the regulatory signal that most closely describes Tornado Cash's architecture. The DOJ is retrying Storm under a legal theory that the same administration's Treasury Department just publicly legitimized. That tension does not resolve cleanly, and it will not resolve cleanly until either Storm is acquitted, the Second Circuit rules on the appeal, or Congress passes legislation that explicitly addresses developer liability for non-custodial privacy infrastructure.
What This Means for You
If you use Bitcoin privacy tools, the relevant question is not whether Tornado Cash's architecture matches your tools exactly. The relevant question is what legal standard the courts establish for developer liability in privacy software cases. An October retrial that results in conviction on the money laundering count, followed by an appeal that upholds that conviction, would create precedent that the DOJ could use to argue that developers of other non-custodial privacy protocols operated unlicensed money transmitting businesses. That is not a certain outcome. It is a live legal risk with a timeline.
The April 9 oral arguments are worth watching specifically. Storm's Rule 29 motion argues the government presented insufficient evidence to support conviction even on the unlicensed money transmitter count. If Judge Failla grants it, the case is over. The evidentiary standard Judge Failla applies to that motion will also signal how she would instruct a jury on the money laundering and sanctions counts in a retrial, giving both sides a cleaner read on retrial risk.
The broader posture: privacy tools are legal today. The Treasury said so explicitly in March. The DOJ is simultaneously prosecuting someone for writing one. Both of those things are true at the same time, and the contradiction will be resolved in court, not in policy statements. In the meantime, the tools themselves, CoinJoin implementations, Wasabi, Sparrow's privacy features, PayJoin, are not under indictment. The developer of a now-immutable Ethereum mixer is. The distinction matters for your threat model, but it should not be read as full legal clearance for privacy tooling in the US environment until the Storm case reaches a final resolution.
What to Watch
April 9 oral arguments on Storm's acquittal motion are the immediate indicator. A grant of acquittal ends the case entirely. A denial means October retrial is likely. Watch also for any DOJ announcement on whether they will retry on all three counts or narrow the scope. The Samourai Wallet case, where co-founders Keonne Rodriguez and William Lonergan Hill pleaded guilty to similar unlicensed money transmitter charges, is a parallel data point on how the government is resolving comparable cases. Rodriguez and Hill's sentencing will be another signal about how seriously the DOJ is pursuing maximum penalties in this category.