Tornado cash was audited. However, it is still an experimental software. Please use at your own risk.
After the OFAC sanctions, please be aware of legal risks.

Tornado Cash Classic

A fully decentralized protocol for private transactions on Ethereum.

Launch Classic App >

Tornado Cash Nova

Second-generation privacy protocol supporting arbitrary amounts and shielded transfers.

Launch New Version

Supported Networks

Ethereum Mainnet
Binance Smart Chain
Polygon Network
Optimism
Arbitrum One
Gnosis Chain
Avalanche Mainnet
Ethereum Goerli

How Tornado Cash works

Deposit

A user generates a random key (note) and deposits Ether or an ERC20, along with submitting a hash of the note to the Tornado Cash smart contract.

Wait

After depositing, users should wait some amount of time before withdrawing to improve their privacy.

Withdraw

A user submits a proof of having the valid key to one of the notes deposited and the contract transfers Ether or the ERC20 to a specified recipient.

How Tornado Cash achieves privacy

Tornado Cash improves transaction privacy by breaking the on-chain link between source and destination addresses. It uses a smart contract that accepts ETH deposits that can be withdrawn by a different address. To preserve privacy a relayer can be used to withdraw to an address with no ETH balance. Whenever ETH is withdrawn by the new address, there is no way to link the withdrawal to the deposit, ensuring complete privacy.

Status of Tornado Cash decentralization

Tornado Cash protocol is fully decentralized and owned by the community: Tornado Cash initial developers have no control over it and are not running any servers

Tornado Cash smart contracts, circuits, and toolchain are fully open sourced.

Tornado Cash smart contracts are unstoppable: there are no admins and no upgradability. Nobody including Tornado Cash initial developers can change it or shut it down.

User interface is hosted by the community on IPFS. It is accessible as long as at least 1 user in the world is hosting it.

Tornado Cash governance and mining smart contracts are deployed by the community in a decentralized way, there is no single deployer.

Protocol parameters and token distribution are controlled by the community via governance.

Trusted setup ceremony for zkSNARKs has 1114 contributions, as long as at least 1 contribution is honest, the zkSNARK keys are secure.

Tornado Cash protocol is developed based on awesome open source research by Zcash team with the help of amazing Ethereum community.

Our Products

Governance

Tornado Cash is completely decentralized, controlled and governed by its community. By acquiring TORN tokens, you can participate by voting on governance proposals and weighing in on the evolution of the protocol.

Anonymity Mining

By using Tornado Cash, you also mine TORN, the governance token of Tornado Cash. The more you use it, the more say you have in the evolution of the protocol.

Compliance

Maintaining financial privacy is essential to preserving our freedoms. Tornado Cash has built-in tools for proving your transaction history and selectively disclosing Tornado deposits.

Trusted Setup Ceremony

Trusted setup ceremony for zkSNARKs has 1114 contributions, as long as at least 1 contribution is honest, the zkSNARK keys are secure.

Initiation

Tornado Cash Governance protocol was deployed by community in a decentralized way. It's only possible using CREATE2 opcode and EIP-2470 deployer.

Relayers Network

Relayers are used to send a withdrawal transaction to an account with no balance, which promotes further user anonymity. To become a relayer, one must register on the Decentralized Relayers Network Registry and meet minimum requirements.

Frequently Asked Questions

❓ What is Tornado Cash?

Tornado Cash is a fully decentralized, non-custodial privacy solution built on Ethereum. It enhances transaction privacy by breaking the on-chain link between sender and recipient addresses.

🔒 How does Tornado Cash ensure privacy?

Tornado Cash uses zero-knowledge proofs (zk-SNARKs) to ensure that no one can link your deposit and withdrawal transactions. When you withdraw funds, the protocol only verifies that you have the right to withdraw without revealing which deposit you are claiming.

🛡️ Is Tornado Cash secure?

Yes, Tornado Cash smart contracts have been audited by leading security companies. The protocol is built on Ethereum and uses well-established cryptographic principles to ensure security.

💰 What cryptocurrencies does Tornado Cash support?

Tornado Cash supports ETH and various ERC-20 tokens on Ethereum, as well as native tokens on other supported blockchains (such as Binance Smart Chain, Polygon, Arbitrum, Optimism, and Avalanche).

🌐 What's the difference between Classic and Nova?

Tornado Cash Classic supports privacy protection for fixed denominations, while Tornado Cash Nova is a second-generation protocol that supports arbitrary amounts and shielded transfers between users.