{"id":399623,"date":"2025-07-24T22:02:05","date_gmt":"2025-07-24T16:32:05","guid":{"rendered":"https:\/\/dripp.zone\/news\/hacker-irs-agent-take-storm-trial-stand-as-government-winds-down-case-crypto-news\/"},"modified":"2025-07-24T22:06:25","modified_gmt":"2025-07-24T16:36:25","slug":"hacker-irs-agent-take-storm-trial-stand-as-government-winds-down-case-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/hacker-irs-agent-take-storm-trial-stand-as-government-winds-down-case-crypto-news\/","title":{"rendered":"Hacker, IRS agent take Storm trial stand as government winds down case &#8211; Crypto News"},"content":{"rendered":"<p><\/p>\n<div>\n<p>The US government expects to rest its case against Tornado Cash co-founder Roman Storm on Thursday following yesterday\u2019s anticipated testimony from an expert witness.<\/p>\n<p>The defense is set to counter the prosecution\u2019s efforts to show Storm could have better guarded against \u201cbad actors\u201d using Tornado Cash \u2014 the crypto mixer used for transaction privacy around which this case centers.<\/p>\n<p>IRS Criminal Investigation special agent Stephan George took the stand to share findings that appeared to link a portion of the funds stolen from Hanfeng Lin to Tornado Cash.\u00a0<\/p>\n<p>Lin testified last week that a fraud recovery service told her to contact Tornado Cash about retrieving her funds. The defense was <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.therage.co\/tornado-cash-mistrial-hangfeng-lin\/\" node=\"[object Object]\">reportedly<\/a> considering a mistrial motion after a subsequent witness, FBI Special Agent Joel DeCapua, didn\u2019t link Lin\u2019s funds to Tornado Cash \u2014 putting the relevance of Lin\u2019s testimony in question.<\/p>\n<p>But George said Wednesday he used public blockchain data \u2014 along with Chainalysis Reactor and TRM Labs \u2014 to find that a portion of Lin\u2019s stolen funds that left Crypto.com ultimately went to Tornado Cash in November of 2021.\u00a0<\/p>\n<p>He used an accounting method known as Last In, First Out (LIFO) \u2014 which assumes the disposal of crypto acquired most recently. When defense attorney Keri Axel challenged LIFO during cross-examination, George defended the method as a generally accepted accounting principle that the IRS \u201crespects.\u201d<\/p>\n<p>Axel\u2019s cross-examination of George was set to continue Thursday morning.\u00a0\u00a0<\/p>\n<p>While the possibility of a mistrial was briefly mentioned in court Tuesday, the defense did not immediately comment about whether that\u2019s still being considered.\u00a0<\/p>\n<p>\u201cIt\u2019s usually not the situation that a trial is declared a mistrial merely because a witness\u2019s testimony is not entirely germane,\u201d Patrick Gruhn, a former partner at Crypto Lawyers LLC and FTX\u2019s ex-head of Europe, told Blockworks. \u201cCourts generally expect a lot more \u2014 egregious misconduct or prejudicial facts against the jury \u2014 before they suspend a trial.\u201d<\/p>\n<p>Though George linking Lin\u2019s funds to Tornado Cash was an attempt by prosecutors to clear up a point of contention that arose, the charges against Storm go well beyond that.\u00a0<\/p>\n<p>At the heart of this case is whether Storm essentially helped criminals \u2014 such as North Korean state-sponsored hackers, The Lazarus Group \u2014 hide stolen funds, as the government alleges. He is charged with conspiracy to commit money laundering, conspiracy to commit sanctions violations, and conspiracy to operate an unlicensed money transmitting business.<\/p>\n<p>Key questions of the case, as shared in opening statements last week, include whether Tornado Cash was immutable and if the developer is responsible for how software is used.<\/p>\n<p>Defense attorney Keri Axel said in her opening statement: \u201cIt\u2019s not a crime to make a useful thing that is misused.\u201d<\/p>\n<p><strong>Read more: <\/strong><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/blockworks.co\/news\/roman-storm-trial-opening-statements\" node=\"[object Object]\">\u2018He lied\u2019: US government makes opening plea to jury in Roman Storm trial<\/a><\/p>\n<p>After the jury left the courtroom on Wednesday afternoon, the prosecution told Judge Katherine Polk Failla that it had two witnesses remaining and could wrap up by Thursday morning.\u00a0<\/p>\n<p>Though the defense had not finalized its slate of witnesses before the court let out on Wednesday, Storm\u2019s attorneys said they could rest their case as soon as Monday. Storm has not yet decided whether he will take the stand, they added.<\/p>\n<p>\u201cI assume you don\u2019t have a hacker testifying,\u201d Failla quipped. \u201cThat would be interesting.\u201d\u00a0<\/p>\n<h2 class=\"\" id=\"user-content-hacker-takes-the-stand\">Hacker takes the stand<\/h2>\n<p>The prosecution<em> did<\/em> put a hacker on the stand on Tuesday. That was Shakeeb Ahmed, who is currently serving a three-year sentence after <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/usao-sdny\/pr\/former-security-engineer-sentenced-three-years-prison-hacking-two-decentralized\" node=\"[object Object]\">pleading<\/a> guilty to computer fraud last year.<\/p>\n<p>Ahmed, a former technical lead in Amazon\u2019s bug-bounty program, detailed how he stole $12 million worth of crypto from exchanges Crema and Nirvana in 2022.<\/p>\n<p>He put his own funds into a Tornado Cash pool to \u201canonymize\u201d them before using a third party \u2014 known as a relayer \u2014 to withdraw them. He then went on to hack the Crema exchange. He did not use Tornado Cash at any point leading up to, or after, he hacked the Nirvana exchange.<\/p>\n<p>The defense, during cross-examination, made clear to the jury that Ahmed never put stolen funds into Tornado Cash.\u00a0<\/p>\n<p>\u201cYou didn\u2019t use Tornado Cash for the [hack] proceeds?\u201d defense attorney David Patton asked.\u00a0<\/p>\n<p>\u201cCorrect,\u201d Ahmed said.<\/p>\n<p>Patton also asked whether Ahmed ever communicated with Storm and the other Tornado Cash founders, or conspired with them to commit crimes.<\/p>\n<p>\u201cI did not,\u201d Ahmed noted.<\/p>\n<h2 class=\"\" id=\"user-content-questioning-tornado-cashs-design-choice\">Questioning Tornado Cash\u2019s design choice<\/h2>\n<p>The prosecution sought to establish, through another witness, that Storm \u2014 along with Tornado Cash co-founders Roman Semenov and Alexey Pertsev \u2014 could have made changes to the protocol to guard against bad actors using it.\u00a0<\/p>\n<p>The Office of Foreign Assets Control (OFAC) deemed the Lazarus Group responsible for the $625 million Ronin Bridge hack in March 2022 and sanctioned the entity. Tornado Cash <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/TornadoCash\/status\/1514904975037669386\" node=\"[object Object]\">said<\/a> the following month that it was using a Chainalysis oracle contract \u201cto block OFAC-sanctioned addresses from accessing the dapp.\u201d<\/p>\n<p>Philip Werlau, an investigator at AnChain.AI, testified that \u2014 while that blocked sanctioned entities from using Tornado Cash\u2019s web application \u2014 founders did not implement this control for deposits made via its Command Line Interface (CLI).\u00a0<\/p>\n<p>\u201cIf there are two doors to a building and you only close one, you\u2019re not preventing access,\u201d Werlau said.<\/p>\n<p>Werlau also explained how Tornado Cash could have maintained an offchain registry with users\u2019 personal info collected through a username-password system.<\/p>\n<p>Anticipating this testimony, defense attorneys noted to the judge earlier that day that while Tornado Cash could have been designed differently, that doesn\u2019t mean what Storm built was illegal.<\/p>\n<p>This sentiment came out during the cross-examination, when defense attorney Brian Klein raised his voice \u2014 asking Werlau if one reason to make pools immutable would be to make them less subject to hacks.<\/p>\n<p>That could reduce the ways a pool could be attacked, Werlau acknowledged.\u00a0<\/p>\n<p>Klein then asked Werlau if he provides personal info when he uses the Ethereum blockchain.<\/p>\n<p>As Werlau paused to think, Klein rephrased, almost shouting: \u201cThere\u2019s nothing like the registry you proposed, is there?\u201d\u00a0<\/p>\n<p>\u201cThat is correct.\u201d<\/p>\n<p>Werlau, seemingly uncomfortable with the confrontation, looked up at the clock. A break for lunch was not far off.\u00a0<\/p>\n<h2 class=\"\" id=\"user-content-the-scene-and-the-stakes\">The scene and the stakes<\/h2>\n<p>This writer sat 20 or so feet from Storm over the last two days, even passing him during breaks en route to the bathroom and elsewhere. The Tornado Cash founder appears calm, but walks with pace.<\/p>\n<p>Sitting next to Axel on the courtroom\u2019s left side, Storm often gazes toward the judge, stand and jury, stone-faced, blinking infrequently behind his glasses. Occasionally, he will scribble something on a Post-It and hand it to a member of his defense team. This writer did not once see Storm roll his eyes or shake his head.\u00a0<\/p>\n<p>Trial attendance ranged from roughly a dozen to two dozen people on Tuesday and Wednesday \u2014 meaning there are plenty of empty seats.\u00a0<\/p>\n<p>While not as high-profile a case as the Sam Bankman-Fried trial, Blockchain Association legal head Marisa Coppel noted its outcome will shape how developers, regulators and policymakers navigate the future of crypto innovation.<\/p>\n<p>\u201cA conviction could set a dangerous precedent by criminalizing the act of writing and publishing open-source code, amplifying fears among US developers and pushing innovation offshore,\u201d she told Blockworks. \u201cAn acquittal, by contrast, may reaffirm that software creation alone isn\u2019t a crime and could help restore confidence in building decentralized tools.\u201d<\/p>\n<p><em>Keep an eye on Blockworks for more <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/blockworks.co\/tag\/roman-storm\" node=\"[object Object]\">Roman Storm trial updates<\/a>.\u00a0<\/em><\/p>\n<hr\/>\n<p><strong>Get the news in your inbox. Explore Blockworks newsletters:<\/strong><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The US government expects to rest its case against Tornado Cash co-founder Roman Storm on Thursday following yesterday\u2019s anticipated testimony from an expert witness. The defense is set to counter the prosecution\u2019s efforts to show Storm could have better guarded against \u201cbad actors\u201d using Tornado Cash \u2014 the crypto mixer used for transaction privacy around [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":399624,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-399623","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/399623","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=399623"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/399623\/revisions"}],"predecessor-version":[{"id":399625,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/399623\/revisions\/399625"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/399624"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=399623"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=399623"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=399623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}