tumbler

A tumbler, or mixer, is a service that takes in your coins and returns different coins, breaking the on-chain link between the funds you deposited and the funds you withdraw. Picture handing a stack of marked bills to a busy cashier who drops them into a big shared till and later pays you out from a different part of the drawer: the value is the same but the specific notes are not the ones you put in. Tumblers come in two fundamentally different flavours — custodial and non-custodial — with very different trust and legal profiles.

Custodial tumblers actually take possession of your coins, hold them in a pooled wallet, and send back unrelated coins minus a fee. They can give good unlinkability if honest, but they require complete trust: the operator can simply steal the pool (an exit scam), can keep logs that later deanonymise everyone, and can themselves be coerced or hacked. Non-custodial mixers remove that trust by using a smart contract and zero-knowledge proofs. The archetype is Tornado Cash on Ethereum: you deposit a fixed denomination and receive a secret note; later you submit a zk-SNARK proving you made some deposit, revealing a nullifier hash but not which deposit, and the contract pays a fresh address you control. No operator ever holds your keys, and the anonymity set is everyone who used the same denomination pool.

Tumblers sit squarely in legal crosshairs because they are equally useful to ordinary people seeking financial privacy and to launderers obscuring stolen or sanctioned funds. In August 2022 the US Office of Foreign Assets Control sanctioned Tornado Cash, the first time a set of immutable smart contracts — code rather than a company — was added to the sanctions list, making it an offence for US persons to interact with the contracts; developers later faced criminal charges. In a notable reversal, a US appeals court (Van Loon v. Department of the Treasury, November 2024) held that immutable smart contracts are not 'property' OFAC can sanction, and the Treasury delisted Tornado Cash in March 2025 — though prosecutions of individuals over alleged money laundering continued separately.

The honest assessment is that tumblers are a sharp, dual-use tool. They genuinely restore a measure of fungibility and privacy on transparent chains, but the fixed-denomination, opt-in design leaves metadata and timing trails, and depositing tainted funds can poison the whole pool for innocent users. This tension is exactly what newer privacy-pool designs, which let honest users prove dissociation from illicit deposits, try to resolve.