MetaMask / MetaMask/metamask-extension
[Bug]: Tornado Cash is disabled.
@bschorchit is already working on this.
Since May 2, 2025.
- Dominant language
- TypeScript
- Stars
- 13.2k
- Forks
- 5.6k
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 451
Description
**Describe the bug**
I'm using the official Tornado Cash website: https://tornadocash-eth.ipns.dweb.link/
It is interacting with the official Tornado Cash router address on ETH mainnet: 0xd90e2f925DA726b50C4Ed8D0Fb90Ad053324F31b
This address is still marked as deceptive despite the removal of OFAC sanctions.
If you try and click through the warning and Confirm the transaction, it gets stuck on Pending
**Expected behavior**
The deposit should go through with no warning.
**Screenshots/Recordings**
**Steps to reproduce**
1. Go to https://tornadocash-eth.ipns.dweb.link/.
2. Deposit 0.1 ETH into the address.
3. When you try to sign the message, you'll get a message saying "This is a deceptive request"
**Error messages or log output**
```shell
```
**Detection stage**
In production (default)
**Version**
12.12.1
**Build type**
None
**Browser**
Firefox
**Operating system**
Linux
**Severity**
I think this impact's 100% of users. We can't use Tornado Cash.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.