The United States on Monday imposed sanctions on Tornado Cash, a popular cryptocurrency service that allows users to mask their transactions, accusing it of helping hackers, including from North Korea, to launder proceeds from their cybercrimes.
A senior treasury department official said Tornado Cash, one of the largest virtual currency “mixers” identified as problematic by the treasury, has reportedly laundered more than $7bn worth of virtual currency since it was created in 2019.
The Lazarus Group, a well-known North Korean government-backed hacking group that has conducted numerous data breaches, both politically and sometimes financially motivated, has laundered at least $455m through Tornado Cash, the treasury said. The Lazarus Group is under US sanctions.
The United States and South Korea have said North Korea has mobilized thousands of hackers to steal funds including cryptocurrencies to finance its weapons programs. North Korea denies the allegations.
Tornado Cash was also used to launder about $100m after the hack of Horizon Bridge, a service operated by the Harmony blockchain, in June and as recently as last week in the $190m hack of crypto startup Nomad, the treasury said.
Despite requests for Tornado Cash to make changes, the criminal activity continued, the official said.
The sanctions on Tornado Cash come after the US treasury targeted Blender in May, imposing sanctions for the first time on a virtual currency mixer – a software tool that pools and scrambles cryptocurrencies from thousands of addresses – and said it would continue to investigate the use of mixers for illicit purposes.
Reuters could not immediately reach Tornado Cash for comment.