U.S. District Judge Katherine Polk Failla heard oral arguments in New York's Southern District on April 9, 2026, on a post-trial motion filed by Tornado Cash co-founder Roman Storm seeking to vacate his conviction. After hearing sharply contested arguments from both sides, Failla declined to issue an immediate ruling, saying only "This is a lot" in acknowledgment of the case's complexity. The outcome will shape not just Storm's future, but the legal exposure of open-source protocol developers worldwide.

---

The Conviction and What Storm Is Challenging

In August 2025, a jury found Storm guilty on one count: conspiracy to operate an unlicensed money transmitting business, which carries a maximum sentence of around five years. The same jury deadlocked on two more serious charges, conspiracy to commit money laundering and conspiracy to violate sanctions, which together carry a potential 40-year sentence. Storm's legal team filed a Rule 29 motion, a procedural mechanism asking the judge to set aside a guilty verdict on the grounds that the evidence was legally insufficient to support it.

Central to the defense's current argument is a 2026 U.S. Supreme Court ruling in Cox Communications, Inc. v. Sony Music Entertainment, which found that internet service providers cannot be held liable for user-driven copyright infringement when they did not encourage or design their services around it. Storm's attorneys argue Tornado Cash operated on the same principle: a neutral, non-custodial tool that its developers neither controlled nor tailored to serve criminal ends. Tornado Cash runs on immutable smart contracts on Ethereum, meaning no individual can alter its core code.

---

The DOJ's Counterargument

U.S. Attorney Jay Clayton pushed back firmly, telling the court that Storm and Tornado Cash are "a far cry from Cox." Prosecutors argued that Storm's compliance measures were "window dressing at best and outright misdirection at worst," deliberately easy to circumvent. The government alleged that Storm personally oversaw more than 250 changes to the platform without implementing meaningful anti-money laundering controls, and that he "actively lied in response to inquiries from victims."

---

Background: Sanctions Lifted, Prosecution Continues

Tornado Cash was sanctioned by the U.S. Treasury's Office of Foreign Assets Control in August 2022, with regulators alleging the protocol had laundered more than $7 billion in virtual assets since its 2019 launch, including $455 million in stolen funds from North Korea's Lazarus Group following the Axie Infinity Ronin Bridge hack. Trading volume on the protocol fell roughly 90 percent in the year following those sanctions.

In November 2024, the Fifth Circuit Court of Appeals ruled that OFAC had overstepped its authority by sanctioning immutable smart contracts, since such contracts cannot be owned or controlled by any person. Treasury formally lifted the sanctions on March 21, 2025. Despite that reversal, the DOJ's criminal case against Storm has continued, a decision that industry observers have criticized as legally inconsistent. A DOJ memo issued in April 2025 signaled some prosecutorial restraint regarding developers, though industry advocates described it as "a vague enforcement signal, not a durable limit on government power."

The Storm prosecution also fits within a broader DOJ enforcement pattern. In August and November 2025, co-founders of Samourai Wallet, a Bitcoin privacy tool, pleaded guilty and received prison sentences. The DOJ has pointed to those outcomes as evidence of its intent to prosecute builders of crypto privacy infrastructure.

Dutch co-founder Alexey Pertsev was convicted by a Dutch court in May 2024 for facilitating $1.2 billion in laundering and received a 64-month prison sentence. He was conditionally released from pretrial detention in early 2025 to work on his appeal, which invokes in part the Fifth Circuit's reasoning. A third co-founder, Roman Semenov, was separately sanctioned by the U.S. Treasury in November 2023, though his criminal exposure has not been publicly established.

---

What This Means Outside the United States

The case carries significant weight for developers and users far beyond American borders. The U.S. share of global blockchain developers has declined from 25 percent to 18 percent since 2021, a trend some policy researchers attribute in part to prosecutorial uncertainty around open-source protocol development.

For developers in South Asia and Africa contributing to decentralized finance projects, the Storm case signals that writing code accessible to U.S. users can attract U.S. criminal jurisdiction regardless of physical location. In Nigeria, Pakistan, and India, where capital controls and state surveillance of financial flows are common, on-chain privacy tools intersect with practical needs around remittances and civil society funding. Nigeria's 2025 Investment and Securities Act charts a markedly different regulatory course from the U.S. approach, illustrating how jurisdictions are diverging on oversight of blockchain infrastructure. Globally, 73 crypto exchanges delisted privacy-focused coins in 2025, a 43 percent increase from 2023, as the regulatory environment tightened.

Crypto-powered remittances reached $19.4 billion in 2024, with South Asia and Sub-Saharan Africa as the two largest remittance-receiving regions globally. Legal frameworks that restrict privacy-preserving infrastructure carry downstream costs for low-income users in those corridors.

---

What Comes Next

If Judge Failla denies the Rule 29 motion, federal prosecutors have requested a retrial on the deadlocked counts for either October 5 or October 12, 2026. Separately, U.S. lawmakers including Reps. Fitzgerald, Cline, and Lofgren have introduced the Promoting Innovation in Blockchain Development Act of 2026, which would limit money transmission liability to parties that take custody of user funds, explicitly excluding protocol developers.