Federal prosecutors have requested a retrial for Tornado Cash developer Roman Storm on two criminal counts that resulted in a hung jury last year. The case carries significant implications for blockchain developers and the legal boundaries of building decentralized software.
The Case and Its Stakes
The Manhattan U.S. Attorney's Office filed a motion Monday requesting Judge Katherine Polk Failla schedule a new trial for October 2025. Storm faces two unresolved charges: conspiracy to commit money laundering and conspiracy to violate sanctions. Combined, these charges carry a maximum sentence of 40 years in federal prison.
Storm's August trial produced a split verdict. Jurors convicted him on one count—conspiracy to operate an unlicensed money-transmitting business—but failed to reach unanimous decisions on the two more serious charges. Prosecutors estimate a retrial would require approximately three weeks.
The government alleges that Tornado Cash, an Ethereum privacy protocol Storm helped develop in 2019, facilitated over $1 billion in illicit transactions, including funds linked to North Korea's Lazarus Group. Storm remains free on bail while proceedings continue.
Implications for Web3 Developers
The prosecution has drawn criticism from developers and legal experts who argue it conflates software creation with criminal activity. Unlike traditional mixing services, Tornado Cash operates through autonomous smart contracts rather than centralized control.
Storm's defense maintains that developers cannot be held liable for how users deploy open-source code after its release. "A jury of 12 Americans heard four weeks of evidence and deadlocked," Storm wrote on X, characterizing the retrial as an attempt to "make writing code a crime."
Shifting Regulatory Environment
The case proceeds amid conflicting signals from Washington. Deputy Attorney General Todd Blanche issued guidance last year stating the Justice Department should avoid using criminal charges to impose regulatory frameworks on blockchain infrastructure. The memo specifically cautioned against targeting developers for user conduct on decentralized platforms.
Meanwhile, Treasury's March 2025 GENIUS Act report acknowledged legitimate uses for privacy tools, including protecting sensitive financial information for individuals and businesses.
For blockchain professionals, the Storm case represents a critical test of legal protections for open-source development work. The outcome will likely influence how employers and developers assess risk in building privacy-focused protocols and decentralized applications. Those working on similar infrastructure should monitor the proceedings closely as they may establish precedent affecting hiring practices and project development across the industry.
