Tornado Cash Investigation Services
Analyze Tornado Cash mixer activity with probabilistic tracing techniques. Expert investigation of deposits, withdrawals, and sanctions compliance documentation.
Tornado Cash smart contracts are sanctioned by OFAC. Our services include sanctions compliance documentation and risk assessment.
Mixer Investigation Expertise
Tornado Cash uses zero-knowledge proofs to break the on-chain connection between deposits and withdrawals. This design makes it the most challenging platform for fund tracing—but not impossible. Our investigation services apply probabilistic analysis techniques that can establish probable connections in many cases.
We're transparent about what mixer investigation can and cannot achieve. Direct proof through Tornado Cash is not possible by design. However, timing correlation, behavioral analysis, and pre/post-mixer tracing often provide valuable intelligence for investigations.
Beyond tracing, we provide critical compliance documentation. OFAC sanctions on Tornado Cash create compliance obligations for financial institutions and businesses. We document wallet exposure to sanctioned addresses for risk assessment and regulatory reporting.
Analysis Techniques
Timing Correlation
Analysis of time patterns between deposits and withdrawals. Short timing gaps combined with other factors can establish probable links. Longer gaps reduce correlation confidence.
Behavioral Analysis
Examine activity patterns before deposits and after withdrawals. Similar behaviors, connected addresses, or operational patterns can strengthen correlation hypotheses.
Relayer Investigation
Many Tornado Cash users employed relayers. Analyzing relayer selection, fees, and patterns provides additional correlation data points.
Pool Analysis
Different Tornado Cash pools (0.1, 1, 10, 100 ETH) have different anonymity set sizes. Smaller pools may offer more correlation opportunities.
Investigation Services
Stolen Fund Investigation
When stolen funds are deposited to Tornado Cash, we document the deposit, analyze withdrawal patterns, and continue tracing with probabilistic matching.
Compliance Documentation
Document wallet interaction with sanctioned Tornado Cash contracts for compliance reporting and risk assessment.
Deposit Timing Analysis
Analyze deposit timing patterns to identify probable withdrawal matches based on timing correlation.
Pre-Deposit Tracing
Complete source of funds investigation for funds before they entered Tornado Cash.
Post-Withdrawal Tracing
Track funds after Tornado Cash withdrawal to identify ultimate destinations.
Relayer Pattern Analysis
Investigate relayer usage for operational security analysis and pattern identification.
Technical Capabilities
Deposit Analysis
Identify and document Tornado Cash deposit transactions with precise timing and amounts.
Withdrawal Correlation
Apply timing, amount, and behavioral analysis to establish probable deposit-withdrawal links.
Pool-Specific Analysis
Track activity across different Tornado Cash pools (0.1, 1, 10, 100 ETH denominations).
Relayer Investigation
Analyze relayer usage patterns and identify relayer addresses involved.
Pre/Post Analysis
Comprehensive investigation of activity before deposits and after withdrawals.
Sanctions Compliance
Document Tornado Cash exposure for compliance and sanctions reporting.
Tornado Cash Investigation FAQ
What is Tornado Cash?
Tornado Cash is an Ethereum mixing service (now sanctioned by OFAC) that uses zero-knowledge proofs to break the on-chain link between deposits and withdrawals. It was widely used for both privacy and money laundering before sanctions. Understanding Tornado Cash is essential for cryptocurrency investigation.
Can you trace funds through Tornado Cash?
Tornado Cash is specifically designed to break direct tracing. However, we apply probabilistic analysis techniques—timing correlation, amount matching, behavioral patterns—to establish probable connections. We're transparent about confidence levels, never claiming certainty that doesn't exist.
What is timing analysis?
Timing analysis examines when deposits and withdrawals occur relative to each other. Deposits followed shortly by withdrawals of matching amounts may be correlated. Combined with behavioral patterns before/after, this can establish probable links.
Is Tornado Cash illegal to use?
Tornado Cash smart contracts were sanctioned by OFAC in August 2022. Interaction with sanctioned addresses has legal implications for US persons and entities. We document Tornado Cash exposure for compliance purposes.
What about funds deposited before sanctions?
We can analyze historical Tornado Cash transactions from before sanctions. The same probabilistic techniques apply. For compliance purposes, we document all Tornado Cash interaction regardless of timing.
How confident are your Tornado Cash correlations?
Confidence varies significantly by case. Strong timing correlation with unique patterns might be "probable." Weaker correlations are "possible." We never claim direct proof through a mixer—only probabilistic matching with clearly stated confidence levels.
What documentation do you provide?
Reports include: identified deposits, probable withdrawal matches with confidence levels, timing analysis, pre-deposit source tracing, post-withdrawal destination tracing, and OFAC sanctions compliance documentation.
Can you identify everyone who used Tornado Cash?
No. Tornado Cash works as designed for users who followed privacy best practices. Our analysis identifies probable matches in cases with timing or behavioral patterns that create correlation opportunities.
Need Tornado Cash Investigation?
From probabilistic tracing to sanctions compliance documentation, our mixer analysis expertise provides actionable intelligence and risk assessment.
Free consultation • No obligation • Response within 24 hours