Tornado Cash processed 968 deposits on July 23, 2026, its busiest single day of the year, according to data from L2Beat. The spike marks a clear return of large-scale users to the crypto mixer after the U.S. Treasury lifted sanctions in March 2025.
What the data shows
L2Beat, a blockchain analytics platform, recorded the surge. The 968 deposits on July 23 far exceed the platform's typical daily volume in 2026. Baseline usage of Tornado Cash has been climbing steadily since the sanctions were removed, even as the project's developer, Roman, remains under legal scrutiny.
Why the spike matters
The jump suggests that attackers who once used Tornado Cash to launder stolen funds are again turning to the mixer. Before the sanctions were lifted, the platform's usage had dropped sharply. Now, with no U.S. restrictions, the tool is once again a go-to for obfuscating transaction trails.
Legal cloud remains
Roman, the developer behind Tornado Cash, still faces legal proceedings. His case is being watched closely by the crypto industry because it tests how far liability extends for software that can be used for both legitimate privacy and illicit finance. The renewed activity on the platform adds urgency to that question.
The Treasury's decision to lift sanctions in March 2025 was controversial. Critics argued it would enable more laundering; supporters said it protected financial privacy. The July 23 data gives ammunition to both sides.
No official comment from the Treasury or from Roman's legal team has been issued since the spike was reported.
The next court hearing in Roman's case is scheduled for September 2026.
