21
August
2023
U.S. v. Roman Storm et. al.
The U.S. government filed criminal charges against Tornado Cash developer Roman Storm on August 21, 2023, alleging that he conspired to operate an unlicensed money-transmitting business, violated U.S. sanctions law, and engaged in money laundering in connection with his role in developing the Tornado Cash protocol. Storm faces up to 45 years in prison if convicted. The case is viewed as a major test of developer liability in decentralized finance and the legal treatment of smart contracts and dApps. Storm’s defense argues that Tornado Cash’s smart contracts are immutable and self-executing, and that Storm did not actively facilitate money laundering. Counsel maintains the protocol was designed to enhance privacy in the transparent crypto ecosystem and that Storm’s code contributions are protected speech under the First Amendment. Prosecutors responded that Tornado Cash was repeatedly used to launder illicit funds, including by the Lazarus Group, a North Korean state-backed hacking organization under U.S. sanctions.
Status: On August 6, 2025, a federal jury convicted Roman Storm of operating an unlicensed money transmission business, following four days of deliberation. The jury acquitted Storm on related counts of money laundering and sanctions evasion, which carried potential 20-year prison terms. Storm now faces a maximum sentence of five years. He remains free on bail and is expected to appeal the conviction. Updated 08/11/2025.