Tornado Cash
TORN
Evaluation Score
Overall rating on a scale of 0-10
Dimension Breakdown
AI Analysis
Comprehensive evaluation of the token
Tornado Cash (TORN) presents an extremely high-risk profile across all fundamental and operational dimensions. While its underlying zk-SNARK privacy protocol represents novel cryptographic technology with historical legacy audits, the project faces severe ongoing challenges. Development is largely stalled with immutable core contracts and outdated toolchains. On the security and governance front, the protocol suffered a May 2023 governance hijack and a January 2024 IPFS frontend supply-chain compromise that leaked private user notes, as reported: "Malicious code was injected into Tornado Cash frontend deployments hosted on IPFS since January 1, 2024, silently leaking users' private note information when interacting with certain functions." Furthermore, the protocol remains under comprehensive, unresolved government sanctions and website seizures targeting its infrastructure for illicit fund flows. Tokenomics provide virtually no protocol fee capture to TORN holders despite non-circulating supply and insider unlock overhangs. With liquidity impaired and a 98.7% drawdown from all-time highs, the token exhibits profound existential and regulatory risks.
Development Activity
Code updates and developer engagement
Community Support
Social media presence and community engagement
Tokenomics
Supply, distribution, and utility
Market & Use Case
Value proposition and competitive landscape
Team & Governance
Team background and project governance
Security & Audits
Security history and audit status
About Tornado Cash (TORN)
Tornado Cash (TORN) is the ERC-20 governance token for Tornado Cash, a decentralized, non-custodial privacy protocol operating on Ethereum and BNB Chain. Founded with public co-founder Roman Semenov, the protocol utilizes zero-knowledge proofs (zk-SNARKs) to break the on-chain link between source and destination addresses for cryptocurrency transactions. TORN has a fixed maximum supply of 10,000,000 tokens, with utility strictly designated for on-chain governance proposals rather than protocol fee accrual or revenue sharing.
The protocol's underlying pool contracts were designed to be immutable, leaving active protocol development in a stalled, maintenance-only state with outdated development toolchains. Historical security reviews of the core contracts and frontend include audits conducted by Pessimistic, Zeropool, ABDK, and Decurity. However, governance and frontend infrastructure have experienced multiple security breaches. In May 2023, Tornado Cash suffered a governance attack where an attacker exploited the lack of a timelock to seize governance control and vote balances. Additionally, between January and February 2024, a supply-chain attack compromised IPFS-hosted frontend deployments, injecting malicious code that leaked users' private cryptographic note information.
Tornado Cash has faced severe regulatory enforcement actions, including comprehensive government sanctions for facilitating the laundering of over $7 billion in virtual assets, including funds linked to North Korean cyber operations. Following these sanctions, the project's original domain was seized. Reflecting these regulatory actions, security compromises, and limited liquidity, the TORN token has experienced a 98.7% drawdown from its all-time high.