Wow. The US Treasury Dept. today announced it is lifting sanctions on Tornado Cash, a cryptocurrency mixing service that state-sponsored hackers from North Korea have been massively using to launder their stolen billions.

"Based on the Administration’s review of the novel legal and policy issues raised by use of financial sanctions against financial and commercial activity occurring within evolving technology and legal environments, we have exercised our discretion to remove the economic sanctions against Tornado Cash as reflected in Treasury’s Monday filing in Van Loon v. Department of the Treasury."

https://home.treasury.gov/news/press-releases/sb0057

h/t to @ncweaver for the heads up. Weaver said: "The US government has just said "money laundering is legal as long as the process is automated."

"Every wei that flows through Tornado Cash, even if 'legitimate,' is helping the North Korean nuclear regime by hiding illegitimate flows," Weaver told me.

Here's Treasury sanctioning Tornado Cash in 2022: https://home.treasury.gov/news/press-releases/jy0916

Tornado Cash Delisting

WASHINGTON — Based on the Administration’s review of the novel legal and policy issues raised by use of financial sanctions against financial and commercial activity occurring within evolving technology and legal environments, we have exercised our discretion to remove the economic sanctions against Tornado Cash as reflected in Treasury’s Monday filing in Van Loon v. Department of the Treasury.  We remain deeply concerned about the significant state-sponsored hacking and money laundering campaign aimed at stealing, acquiring, and deploying digital assets for the Democratic People’s Republic of Korea (DPRK) and the Kim regime.  Treasury remains committed to using our authorities to expose and disrupt the ability of malicious cyber actors to profit from their criminal activities through the exploitation of digital assets and the digital assets ecosystem.  We are also committed to enforcing our sanctions against the DRPK to constrain the regime’s ability to fund its weapons of mass destruction and ballistic missile programs.  Treasury will continue to monitor closely any transactions that may benefit malicious cyber actors or the DPRK, and U.S. persons should exercise caution before engaging in transactions that present such risks.“Digital assets present enormous opportunities for innovation and value creation for the American people,” said Secretary of the Treasury Scott Bessent.  “Securing the digital asset industry from abuse by North Korea and other illicit actors is essential to establishing U.S. leadership and ensuring that the American people can benefit from financial innovation and inclusion.”View identifying information on today’s action.###

U.S. Department of the Treasury
@ncweaver Serious question. How long before the same starts to happen to sanctioned Russian entities? In 3..2..1?
@briankrebs @ncweaver Not very long. As long as the relevant people get a cut, everyone can be back in business ASAP.
@briankrebs @ncweaver They think Canada is more dangerous than North Korea
@avirr @briankrebs @ncweaver no. They think Canada is an underling. North Korea is a peer.

@avirr @briankrebs @ncweaver

When you are a criminal, law and order is dangerous.

@briankrebs @ncweaver

As the convict continues to support global crime and dictators. Just wait until the drug cartels offer him a slice of their profits...

@briankrebs Trump has a thing for their dictator. This is his version of hand job.
@briankrebs @ncweaver US speedrunning "crime syndicate with nukes any%" 🙃
@briankrebs @ncweaver
PUES SI EL MISMO DEPARTAMENTO DEL TESORO, LIBERA A ESTA GENTE ESTAFADORA DE RICOS DE CRIPTOMONEDAS....USA TIENE UN JODIDO PROBLEMA...SOBRE LA GENTE DEL DIA DIA....

@briankrebs @ncweaver @molly0xfff I wonder if someone in the Trump administration is taking grift from the North Koreans?

(Kidding/not kidding)

@briankrebs @ncweaver If it were any other administration, I might read this as an effort to increase the visibility of 🇰🇵 transactions in the flow to assist in tracking their smurfs. If I were 🇰🇵 I would read this as "Tornado Cash has been compromised", run away.

I'm not feeling that charitable today.

@briankrebs Brian, Tornado Cash is a *protocol*. Sanctioning it and its inventors is like sanctioning an encryption algorithm, because "it helps criminals". It flies in the face of 1s Amendment and I think there was a court ruling that basically "you can't do that".

By all means, sanction those who use the protocol for laundering money. But the protocol itself?!

@briankrebs @ncweaver Money laundering is legal so long as Trump gets his cut.
@briankrebs @ncweaver Apparently this was a long time coming, per a Fifth Circuit ruling that the original ban was unlawful, thanks to Loper Bright. https://www.morganlewis.com/pubs/2024/12/fifth-circuit-rejects-ofacs-tornado-cash-sanctions
Fifth Circuit Rejects OFAC’s Tornado Cash Sanctions

In a ruling eagerly awaited by the cryptocurrency industry, the US Court of Appeals for the Fifth Circuit held that immutable smart contracts on the Tornado Cash crypto-transaction software protocol are not “property” subject to the sanctions jurisdiction asserted by the Office of Foreign Assets Control (OFAC). Relying on the US Supreme Court’s decision in Loper Bright Enterprises v. Raimando, the circuit court ruled that the unique nature of immutable smart contracts means they lack the classic characteristics of property as that term is used in OFAC’s sanctions regulations, and as a result, OFAC’s ability to sanction Tornado Cash and the smart contracts is limited.

@briankrebs @ncweaver

I'm going to have to invent whole new classes of quantum expletives and relativistic pejoratives to describe this shit.

@briankrebs @ncweaver Crypto currency is how they siphon off the money we actually have. Put our reserves into crypto and POOF!

Oh, we'll know the numbers. All of them. We may even eventually be able to prove that it all went to Russia or whatever. For all the good it'll do.

@briankrebs @ncweaver to be fair services like TC are also useful to people who for example need to pay hosting fees for their naughty journalism website. but then they should just be using monero for that, since it has privacy built-in
@briankrebs @ncweaver
Crypto is probably the worst thing to happen to technology.
@Sibshops @briankrebs @ncweaver There's a lot of horses in that race, but yeah it's a close favorite.
@briankrebs @ncweaver what a great time to be a criminal! Well, unless your setting Teslers on fire, then your fucked.
@briankrebs In how many ways will Trump Shame these United States. The limit to his Grift is the answer.

@briankrebs

@ncweaver

Well, you certainly CAN sanction autonomous protocols, you'll just look like a fool when folks realize your sanctions have no power over them.