Dutch court sentenced Alexey Pertsev to 64 months in prison on May 14, 2024, for money laundering related to operating the Tornado Cash cryptocurrency mixer.
A Dutch court sentenced Alexey Pertsev to 64 months—five years and four months—in prison on May 14, 2024, for money laundering charges related to his role in creating and maintaining the Tornado Cash cryptocurrency mixer, establishing a precedent for developer liability in open-source protocols.
Tornado Cash had been one of the largest privacy-focused smart contracts in cryptocurrency. The protocol allowed users to deposit cryptocurrency and later withdraw the same amount from a different address, breaking the on-chain transaction history that public blockchains record by default. This mixing functionality provided privacy benefits for legitimate users concerned about transaction surveillance, but it also enabled money launderers to obscure the origin of criminal proceeds.
The United States Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash in August 2022, designating the protocol's addresses as blocked accounts and prohibiting US persons from interacting with the contract. The OFAC action reflected concern that Tornado Cash was processing $7 billion or more in cryptocurrency flows, with a substantial portion representing proceeds from ransomware attacks, fraud, and other criminal activity. The designation created immediate market impact, as cryptocurrency exchanges removed Tornado Cash liquidity pools and discontinued trading pairs to comply with US sanctions.
Pertsev had been arrested in Amsterdam on August 10, 2022, days after the OFAC sanctions. Dutch prosecutors charged him with facilitating money laundering through Tornado Cash, arguing that his role in creating, maintaining, and promoting the protocol made him liable for the laundering activity that users conducted through it. The prosecution contended that Pertsev had earned income from Tornado Cash governance tokens and transaction fees, creating financial incentive and knowledge of the laundering activity.
The May 2024 conviction established that developers could face criminal liability for open-source code used in cryptocurrency mixing, even if the developer did not control the protocol after launch or directly facilitate any individual transaction. The verdict created immediate concerns among cryptocurrency developers about whether creating privacy-focused tools could expose them to criminal prosecution in jurisdictions where those tools enabled money laundering at scale.
Roman Storm, a second co-founder of Tornado Cash, faced a separate criminal trial in the United States District Court for the Southern District of New York. Storm's prosecution proceeded on parallel grounds: that he had conspired to create and operate money laundering infrastructure through Tornado Cash. The US trial raised questions about whether US courts would apply the same developer liability framework that Dutch courts had established in Pertsev's case.
The Electronic Frontier Foundation and other digital rights organizations opposed Pertsev's prosecution, arguing that holding developers liable for the downstream use of open-source code set a dangerous precedent that would chill legitimate privacy technology development. The EFF submitted statements contending that developers should not bear criminal liability for uses of their code over which they exercised no control. The argument reflected broader concerns about whether government enforcement against developers would prove chilling to legitimate privacy research and tool development.
Privacy advocates argued that legitimate users—journalists protecting sources, political dissidents in authoritarian regimes, and individuals concerned about financial surveillance—benefited from mixing protocols. The Pertsev prosecution did not distinguish between these legitimate users and money launderers, treating all use of the protocol as equally problematic. This framework, critics argued, would discourage development of any privacy technology that might enable criminal activity, even if legitimate use cases existed.
Tornado Cash's protocol mechanisms had been entirely open-source, with no centralized operator or admin key that Pertsev could use to control transaction flows or freeze funds. Once deployed, the smart contract executed according to its code without ongoing management from developers. This architecture raised the question of whether a developer should face liability for anonymous users' decisions to conduct criminal activity through code that the developer no longer controlled.
The prosecution established that Pertsev had earned income from Tornado Cash governance token distributions and from protocol fees, suggesting financial motive and knowledge. The court found that his continued promotion of Tornado Cash after the OFAC sanctions demonstrated awareness that the protocol was processing stolen funds and criminal proceeds. This factual finding distinguished the case from scenarios where a developer might write code and move on without monitoring downstream use.
US and European regulators took note of the Pertsev conviction as they crafted cryptocurrency compliance frameworks. The decision suggested that developers of privacy technologies would face significant legal exposure in multiple jurisdictions, particularly if they maintained involvement with or publicly promoted the technology after criminalization actions. This regulatory signal affected cryptocurrency development more broadly, discouraging open-source developers from building tools that might enable mixing or privacy, regardless of legitimate use cases.
The sentence of 64 months represented substantial prison time for a financial crime that involved no traditional victims—no theft, fraud, or direct injury to individuals, but rather potential facilitation of crime by anonymous third parties. The Dutch court's decision on May 14, 2024, established that cryptocurrency developers could face lengthy prison sentences for maintaining privacy protocols, setting a legal precedent that continues to influence open-source development in the cryptocurrency space.
