News Heat Trend
Project Overview
Tornado Cash is a decentralized and non-custodial privacy solution. It improves transaction privacy by breaking the on-chain link between source and destination addresses. This is achieved through a smart contract that accepts ETH and other token deposits from one address, and enables their withdrawal from a different address.
Non-custodial developer criminal liability explicit protection removed, Coin Center says Roman Storm prosecution theory still not excluded
Bitcoin News posted on X platform stating that Coin Center says the latest revised BRCA text removes the provision that provided explicit criminal liability protection for developers who do not control user funds under 18 U.S.C. § 1960. The revised text would still protect developers who do not control user funds from being deemed money transmitters under the Bank Secrecy Act and FinCEN regulations, thereby significantly raising the difficulty of prosecuting developers solely for failing to obtain a money transmitter license or register with the federal government. However, the text cannot prevent prosecutors from arguing that developers knowingly transmitted funds derived from criminal activity, a theory that has become the core basis in the criminal cases against Tornado Cash developer Roman Storm and Samourai Wallet developers. Coin Center believes that this compromise represents substantive progress on the regulatory front, but developers still face broader money transmission criminal prosecution theories from the U.S. Department of Justice; if the CLARITY Act passes with the revised BRCA, the related disputes will mainly shift to the courts.
JaredfromSubway.eth sandwich attack bot has extracted $295 million in total, with $7.5 million stolen in June
Odaily News: The sandwich attack bot operated by JaredfromSubway.eth has extracted a cumulative total of 117,007 ETH since March 2023, worth approximately $295 million at current prices. In June 2026, an anonymous attacker deployed 66 counterfeit token contracts, exploiting the bot's automated trading logic to steal at least $7.5 million in ETH and stablecoins, and funneled the funds into Tornado Cash. The stolen assets have not yet been recovered.Sandwich attacks are a form of Maximal Extractable Value (MEV): the bot monitors large transactions in Ethereum's public mempool, buys ahead of the target transaction, and sells after the transaction pushes the price up, capturing profits from the spread. The bot's primary contract had received a cumulative total of 117,007 ETH as of August 28.MEV-Boost block construction is centralized among a small group of participants, with relay.ultrasound.money, Titan Relay, and bloXroute regulated relays collectively forwarding approximately 85% to 88% of related blocks within a 24-hour window; Titan's builder independently assembled 50.3% of the blocks. Monthly sandwich attack extraction amounts have declined from approximately $10 million in late 2024 to roughly $2.5 million in October 2025. (Bitcoin.com News)
Tornado Cash founder Roman Storm questions DOJ logic, says Google and OpenAI should also be held accountable
Odaily News, Tornado Cash founder Roman Storm stated that if the logic behind the U.S. Department of Justice's (DOJ) case against him holds, tech companies Google and OpenAI should also be held liable for North Korean hackers abusing their products. Those involved reportedly used ChatGPT to write code and Google Gemini for forgery and image manipulation. Storm was convicted in August 2025 of conspiracy to operate an unlicensed money-transmitting business. He pointed out that the Tornado Cash case could set a legal precedent where software developers are penalized for criminal acts committed by users, emphasizing that criminals should be held accountable rather than the developers of tools. The CLARITY Act for digital asset markets is intended to provide protections for software developers by distinguishing developer liability from the potential misuse of protocols for illegal activities. However, although a final motion for consideration of the bill has been scheduled for a vote, its current chances of passage remain low. (Bitcoin News)
Donald Trump earned over $1.4 billion from crypto businesses in 2025, while CLARITY Act identified with five major flaws
Odaily News: On August 5, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs stated that the July 22 version of the CLARITY Act fails to meet five minimum standards. The bill, numbered H.R. 3633, aims to divide digital asset regulatory authority between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The analysis suggests that the bill's two-tier system could remove certain blockchain assets from SEC oversight, allowing issuing companies to self-certify exemptions from securities regulation. Healthy Markets and five labor organizations have raised concerns over pension protections and securities law loopholes, while minority staff also noted that investors' private right of action and state and tribal enforcement powers could be weakened. Minority staff stated that DeFi-related companies could be exempt from anti-illegal financing obligations even if they earn millions of dollars from platform transactions; some crypto mixers may circumvent U.S. sanctions by exploiting the "Tornado Cash loophole." The Independent Community Bankers of America (ICBA) and the Conference of State Bank Supervisors (CSBS) warned that stablecoin yields could drain deposits from community banks, and the Systemic Risk Council has flagged related banking activities as potential bailout risks. Minority staff noted that Donald Trump alone earned over $1.4 billion from crypto businesses in 2025, with related enforcement solely under the purview of his Attorney General, and that obligations would terminate upon his departure from office. Elizabeth Warren and Richard Blumenthal, citing $3.8 billion in investor losses, have separately called on the SEC to investigate Trump memecoin. The Senate is scheduled to hold a cloture vote on September 15 on the motion to proceed, with the bill needing 60 votes to advance. (Bitcoin.com News)
CLARITY Act Hearing Live: AI Regulatory Sandbox Amendment Passes, Amendment to Block High-Risk Assets from Retirement Accounts Rejected
the deliberation of the "Cryptocurrency Market Structure Act" (i.e., the CLARITY Act) has commenced in the U.S. Senate Banking Committee. As of now:1. An amendment proposed by Senator Mike Rounds to create an AI regulatory sandbox was passed with 15 votes in favor and 9 against, indicating some bipartisan support, despite Senator Elizabeth Warren urging Democratic members to vote against it.2. An amendment proposed by Elizabeth Warren, aimed at "preventing high-risk assets from entering retirement accounts," was rejected with 11 votes in favor and 13 against.3. An amendment previously proposed by Senator Katie Britt of Alabama, which would have allowed certain retirement accounts to invest in pooled investment vehicles, was withdrawn before the vote.It is reported that one of the most contentious amendments comes from Elizabeth Warren, concerning the strengthening of sanctions authority over cryptocurrency mixers. In her remarks, she referenced the U.S.-sanctioned mixing protocol Tornado Cash, stating it has been used to launder over $7 billion for criminal organizations and North Korean hacker groups, including over $450 million in related funds. Warren argued that the current bill does not grant the U.S. Treasury Department sufficient legal authority to isolate or restrict mixer services, potentially creating loopholes in anti-money laundering oversight. In response, Cynthia Lummis countered that the illegal financial activities are already covered in Parts Two and Three of the bill.
Senator Warren questioned the adequacy of anti-money laundering tools during the hearing, citing Tornado Cash as an example
Odaily News: Crypto In America journalist Eleanor Terrett posted on X platform, stating that Tornado Cash became the focus of the day's hearing, with lawmakers debating whether the bill provides law enforcement with sufficient tools to combat money laundering.Senator Warren told Kennedy: "This is the Tornado problem... Do you remember Tornado, that mixer? What is Tornado used for? If you're a terrorist, you put your money in!" Republican lawmakers argued that the Clarity Act provides tools to address this issue, while Warren stated the bill is insufficient. Other Democrats joined her in voting to support the inclusion of the amendment. The amendment did not pass.
JaredfromSubway.eth sandwich attack bot has extracted $295 million in total, with $7.5 million stolen in June
Odaily News: The sandwich attack bot operated by JaredfromSubway.eth has extracted a cumulative total of 117,007 ETH since March 2023, worth approximately $295 million at current prices. In June 2026, an anonymous attacker deployed 66 counterfeit token contracts, exploiting the bot's automated trading logic to steal at least $7.5 million in ETH and stablecoins, and funneled the funds into Tornado Cash. The stolen assets have not yet been recovered.Sandwich attacks are a form of Maximal Extractable Value (MEV): the bot monitors large transactions in Ethereum's public mempool, buys ahead of the target transaction, and sells after the transaction pushes the price up, capturing profits from the spread. The bot's primary contract had received a cumulative total of 117,007 ETH as of August 28.MEV-Boost block construction is centralized among a small group of participants, with relay.ultrasound.money, Titan Relay, and bloXroute regulated relays collectively forwarding approximately 85% to 88% of related blocks within a 24-hour window; Titan's builder independently assembled 50.3% of the blocks. Monthly sandwich attack extraction amounts have declined from approximately $10 million in late 2024 to roughly $2.5 million in October 2025. (Bitcoin.com News)
value of 73 BTC, worth $4.6 million, originally came from the Whirlpool coin mixer, with some funds bridged to Ethereum and deposited through a phishing Tornado Cash interface
Odaily News: According to on-chain detective Specter's monitoring, the victim claimed that due to a Coldcard hack, funds were transferred from Bitcoin to Ethereum. However, on-chain data shows that the 73 BTC ($4.6 million) originally came from the Whirlpool coin mixer two weeks ago, with some of it bridged to Ethereum and subsequently deposited through a phishing Tornado Cash interface. Two coin mixers were used during the fund transfer process. The individual was also found to have appeared in Telegram groups involving private key searches and brute-force attacks. On-chain detective Specter stated that the victim may be a threat actor, and their funds may have been stolen by another threat actor.
A hacker spent 38.5 million DAI/USDS to buy 18,273 ETH within 5 hours
According to monitoring by on-chain analyst Ember (@EmberCN), a hacker address associated with Tornado Cash bought 18,273 ETH at an average price of $2,109, spending 38.535 million DAI/USDS over the past 5 hours during today's strong ETH rebound. It is reported that the aforementioned stablecoins originated from 17,124 ETH the hacker received from Tornado Cash 9 months ago, which were all sold at an average price of approximately $3,308 at that time to be held as stablecoins, and were bought back to rebuild positions today taking advantage of the significant ETH rebound.
Spent 38.535 million DAI/USDS, hacker bought 18,273 ETH in 5 hours
Odaily News According to on-chain analyst Yu Jian's monitoring, a hacker spent 38.535 million DAI/USDS to buy 18,273 ETH over the past 5 hours, at a purchase price of $2,109. The aforementioned stablecoins came from 17,124 ETH received from Tornado Cash 9 months ago. The hacker subsequently sold the ETH at an average price of approximately $3,308 and converted it into DAI and USDS for holding. Today, during the ETH rebound, the hacker repurchased ETH.
The Pando Rings hacker has become active again after two months of silence, transferring 800 ETH into Tornado Cash
According to monitoring by on-chain analyst Onchain Lens (@OnchainLens), the Pando Rings exploiters have become active again after two months of silence, swapping 3 million DAI for approximately 1,570 ETH (worth about $3 million) via CoW Protocol, and subsequently transferring 800 ETH (about $1.52 million) of them into the mixer Tornado Cash through eight transactions, suspected of laundering funds. Pando Rings previously suffered an oracle manipulation attack in November 2022, losing about $20 million.
Solana OG Attacker Transfers Another $4.39 Million to Tornado Cash
Odaily News: According to Onchain Lens monitoring, addresses associated with the Solana OG attacker (0xd229...9D15, 0x501...f051) have transferred 2,290 ETH, worth $4.39 million, to Tornado Cash. This operation occurred nearly a month after the $14.2 million attack incident; the same cluster of addresses also used Tornado Cash two weeks ago.
Term Labs hacker deposits 960 ETH cumulatively into Tornado Cash, latest deposit 400 ETH
Odaily News: Term Labs hacker deposited 400 ETH into Tornado Cash, bringing the cumulative total to 960 ETH.
Notional Finance custody contract suspected hack, ~$1.7M in assets lost
According to PeckShieldAlert citing Specter's monitoring, Notional Finance's custody contract may have been exploited, resulting in approximately $1.7 million in DAI and USDC losses. The attacker has converted the stolen funds into 689.2 ETH and deposited them into Tornado Cash.
TectonicFi attacker address deposited 2,658.9 ETH into Tornado Cash.
PeckShieldAlert monitoring shows that an address flagged as the TectonicFi attacker has deposited 2,658.9 ETH into Tornado Cash, valued at approximately $6.65 million.
JaredfromSubway.eth sandwich attack bot has extracted $295 million in total, with $7.5 million stolen in June
Odaily News: The sandwich attack bot operated by JaredfromSubway.eth has extracted a cumulative total of 117,007 ETH since March 2023, worth approximately $295 million at current prices. In June 2026, an anonymous attacker deployed 66 counterfeit token contracts, exploiting the bot's automated trading logic to steal at least $7.5 million in ETH and stablecoins, and funneled the funds into Tornado Cash. The stolen assets have not yet been recovered.Sandwich attacks are a form of Maximal Extractable Value (MEV): the bot monitors large transactions in Ethereum's public mempool, buys ahead of the target transaction, and sells after the transaction pushes the price up, capturing profits from the spread. The bot's primary contract had received a cumulative total of 117,007 ETH as of August 28.MEV-Boost block construction is centralized among a small group of participants, with relay.ultrasound.money, Titan Relay, and bloXroute regulated relays collectively forwarding approximately 85% to 88% of related blocks within a 24-hour window; Titan's builder independently assembled 50.3% of the blocks. Monthly sandwich attack extraction amounts have declined from approximately $10 million in late 2024 to roughly $2.5 million in October 2025. (Bitcoin.com News)
Term Labs attacker deposited 300 ETH into Tornado Cash, worth approximately $741,000.
According to monitoring by PeckShield, the Term Labs attacker address deposited 300 ETH into Tornado Cash, worth approximately $741,000.
value of 73 BTC, worth $4.6 million, originally came from the Whirlpool coin mixer, with some funds bridged to Ethereum and deposited through a phishing Tornado Cash interface
Odaily News: According to on-chain detective Specter's monitoring, the victim claimed that due to a Coldcard hack, funds were transferred from Bitcoin to Ethereum. However, on-chain data shows that the 73 BTC ($4.6 million) originally came from the Whirlpool coin mixer two weeks ago, with some of it bridged to Ethereum and subsequently deposited through a phishing Tornado Cash interface. Two coin mixers were used during the fund transfer process. The individual was also found to have appeared in Telegram groups involving private key searches and brute-force attacks. On-chain detective Specter stated that the victim may be a threat actor, and their funds may have been stolen by another threat actor.
JaredfromSubway.eth sandwich attack bot has extracted $295 million in total, with $7.5 million stolen in June
Odaily News: The sandwich attack bot operated by JaredfromSubway.eth has extracted a cumulative total of 117,007 ETH since March 2023, worth approximately $295 million at current prices. In June 2026, an anonymous attacker deployed 66 counterfeit token contracts, exploiting the bot's automated trading logic to steal at least $7.5 million in ETH and stablecoins, and funneled the funds into Tornado Cash. The stolen assets have not yet been recovered.Sandwich attacks are a form of Maximal Extractable Value (MEV): the bot monitors large transactions in Ethereum's public mempool, buys ahead of the target transaction, and sells after the transaction pushes the price up, capturing profits from the spread. The bot's primary contract had received a cumulative total of 117,007 ETH as of August 28.MEV-Boost block construction is centralized among a small group of participants, with relay.ultrasound.money, Titan Relay, and bloXroute regulated relays collectively forwarding approximately 85% to 88% of related blocks within a 24-hour window; Titan's builder independently assembled 50.3% of the blocks. Monthly sandwich attack extraction amounts have declined from approximately $10 million in late 2024 to roughly $2.5 million in October 2025. (Bitcoin.com News)
Donald Trump earned over $1.4 billion from crypto businesses in 2025, while CLARITY Act identified with five major flaws
Odaily News: On August 5, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs stated that the July 22 version of the CLARITY Act fails to meet five minimum standards. The bill, numbered H.R. 3633, aims to divide digital asset regulatory authority between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The analysis suggests that the bill's two-tier system could remove certain blockchain assets from SEC oversight, allowing issuing companies to self-certify exemptions from securities regulation. Healthy Markets and five labor organizations have raised concerns over pension protections and securities law loopholes, while minority staff also noted that investors' private right of action and state and tribal enforcement powers could be weakened. Minority staff stated that DeFi-related companies could be exempt from anti-illegal financing obligations even if they earn millions of dollars from platform transactions; some crypto mixers may circumvent U.S. sanctions by exploiting the "Tornado Cash loophole." The Independent Community Bankers of America (ICBA) and the Conference of State Bank Supervisors (CSBS) warned that stablecoin yields could drain deposits from community banks, and the Systemic Risk Council has flagged related banking activities as potential bailout risks. Minority staff noted that Donald Trump alone earned over $1.4 billion from crypto businesses in 2025, with related enforcement solely under the purview of his Attorney General, and that obligations would terminate upon his departure from office. Elizabeth Warren and Richard Blumenthal, citing $3.8 billion in investor losses, have separately called on the SEC to investigate Trump memecoin. The Senate is scheduled to hold a cloture vote on September 15 on the motion to proceed, with the bill needing 60 votes to advance. (Bitcoin.com News)
Ostium trading remains paused, user margin funds remain frozen
Odaily reports, perpetual contract DEX Ostium stated that platform trading remains paused following a security incident. User positions remain open but cannot be modified for now, and trading margin funds are still held in the frozen trading smart contract without any movement.Ostium stated that its team is continuously coordinating with relevant authorities, SEAL 911, and multiple security researchers. Updates regarding the resumption of smart contract activities and the timeline for fund recovery will be released subsequently.According to PeckShield monitoring, approximately 24 million USDC from Ostium's public OLP vault was stolen. The attacker subsequently swapped these funds for approximately 12,100 ETH, of which about 10,500 ETH was transferred to Tornado Cash.
hinkal will fully compensate user funds, confirming approximately 797,000 USDC was extracted by an attacker and swapped for 454 ETH
decentralized privacy protocol hinkal has released an update on a security incident, confirming that an attacker extracted approximately 797,000 USDC from its Ethereum contract through a series of transactions and exchanged it for about 454 ETH. Of this, roughly 410 ETH was subsequently transferred to Tornado Cash, while the remaining approximately 44.67 ETH was bridged to the Bitcoin network via THORChain. hinkal is currently collaborating with an external security team to trace the flow of funds.hinkal stated that the impact of this security incident is limited to the relevant fund pools on the Ethereum chain, and contracts on other chains remain unaffected. However, all contracts have been temporarily suspended for fixes and security verification. All affected users will be fully compensated at a 1:1 ratio, with specific compensation procedures and timelines to be announced in a subsequent update.
Ethereum Foundation’s Kohaku Launches Wallet Privacy Integration SDK, Enabling Ethereum Wallets to Integrate Protocols Such as Railgun
According to The Defiant, the Ethereum Foundation’s Kohaku Initiative has released an SDK for integrating privacy protocols into Ethereum wallets. A functional 4337 mempool relay supporting private transactions is now available in version v0.0.1-alpha.21 of the kohaku-eth/railgun integration. This SDK aims to integrate shielded-pool protocols—such as Railgun, Tornado Cash, and Privacy Pools—directly into wallet interfaces, reducing reliance on centralized relay infrastructure. Kohaku has also demonstrated a CLI-based wallet and is advancing integration with production-grade wallets like Ambire, while simultaneously developing post-quantum accounts, multisig support, and hardware wallet compatibility.
CLARITY Act Hearing Live: AI Regulatory Sandbox Amendment Passes, Amendment to Block High-Risk Assets from Retirement Accounts Rejected
the deliberation of the "Cryptocurrency Market Structure Act" (i.e., the CLARITY Act) has commenced in the U.S. Senate Banking Committee. As of now:1. An amendment proposed by Senator Mike Rounds to create an AI regulatory sandbox was passed with 15 votes in favor and 9 against, indicating some bipartisan support, despite Senator Elizabeth Warren urging Democratic members to vote against it.2. An amendment proposed by Elizabeth Warren, aimed at "preventing high-risk assets from entering retirement accounts," was rejected with 11 votes in favor and 13 against.3. An amendment previously proposed by Senator Katie Britt of Alabama, which would have allowed certain retirement accounts to invest in pooled investment vehicles, was withdrawn before the vote.It is reported that one of the most contentious amendments comes from Elizabeth Warren, concerning the strengthening of sanctions authority over cryptocurrency mixers. In her remarks, she referenced the U.S.-sanctioned mixing protocol Tornado Cash, stating it has been used to launder over $7 billion for criminal organizations and North Korean hacker groups, including over $450 million in related funds. Warren argued that the current bill does not grant the U.S. Treasury Department sufficient legal authority to isolate or restrict mixer services, potentially creating loopholes in anti-money laundering oversight. In response, Cynthia Lummis countered that the illegal financial activities are already covered in Parts Two and Three of the bill.
Related news
Non-custodial developer criminal liability explicit protection removed, Coin Center says Roman Storm prosecution theory still not excluded
Bitcoin News posted on X platform stating that Coin Center says the latest revised BRCA text removes the provision that provided explicit criminal liability protection for developers who do not control user funds under 18 U.S.C. § 1960. The revised text would still protect developers who do not control user funds from being deemed money transmitters under the Bank Secrecy Act and FinCEN regulations, thereby significantly raising the difficulty of prosecuting developers solely for failing to obtain a money transmitter license or register with the federal government. However, the text cannot prevent prosecutors from arguing that developers knowingly transmitted funds derived from criminal activity, a theory that has become the core basis in the criminal cases against Tornado Cash developer Roman Storm and Samourai Wallet developers. Coin Center believes that this compromise represents substantive progress on the regulatory front, but developers still face broader money transmission criminal prosecution theories from the U.S. Department of Justice; if the CLARITY Act passes with the revised BRCA, the related disputes will mainly shift to the courts.
Term Labs hacker deposits 960 ETH cumulatively into Tornado Cash, latest deposit 400 ETH
Odaily News: Term Labs hacker deposited 400 ETH into Tornado Cash, bringing the cumulative total to 960 ETH.
Notional Finance custody contract suspected hack, ~$1.7M in assets lost
According to PeckShieldAlert citing Specter's monitoring, Notional Finance's custody contract may have been exploited, resulting in approximately $1.7 million in DAI and USDC losses. The attacker has converted the stolen funds into 689.2 ETH and deposited them into Tornado Cash.
TectonicFi attacker address deposited 2,658.9 ETH into Tornado Cash.
PeckShieldAlert monitoring shows that an address flagged as the TectonicFi attacker has deposited 2,658.9 ETH into Tornado Cash, valued at approximately $6.65 million.
JaredfromSubway.eth sandwich attack bot has extracted $295 million in total, with $7.5 million stolen in June
Odaily News: The sandwich attack bot operated by JaredfromSubway.eth has extracted a cumulative total of 117,007 ETH since March 2023, worth approximately $295 million at current prices. In June 2026, an anonymous attacker deployed 66 counterfeit token contracts, exploiting the bot's automated trading logic to steal at least $7.5 million in ETH and stablecoins, and funneled the funds into Tornado Cash. The stolen assets have not yet been recovered.Sandwich attacks are a form of Maximal Extractable Value (MEV): the bot monitors large transactions in Ethereum's public mempool, buys ahead of the target transaction, and sells after the transaction pushes the price up, capturing profits from the spread. The bot's primary contract had received a cumulative total of 117,007 ETH as of August 28.MEV-Boost block construction is centralized among a small group of participants, with relay.ultrasound.money, Titan Relay, and bloXroute regulated relays collectively forwarding approximately 85% to 88% of related blocks within a 24-hour window; Titan's builder independently assembled 50.3% of the blocks. Monthly sandwich attack extraction amounts have declined from approximately $10 million in late 2024 to roughly $2.5 million in October 2025. (Bitcoin.com News)
Retrial for Tornado Cash developer Roman Storm postponed until April 2027
According to The Block, the retrial of Tornado Cash developer Roman Storm has been postponed to April 26, 2027, due to a pending motion for a judgment of acquittal. U.S. prosecutors had previously proposed that the retrial begin in October 2026.