image Source This Link

Overview

In this dashboard, I will answer this question from Flipside Crypto:

Tornado Cash is in the news due to the sanctions imposed by the US government and the freezing of $75K of USDC from Circle. The addresses tied to the service have been publicly posted online. (Hint: we also have them in our crosschain address labels table as well).

Using those addresses:

Which of the Tornado Cash addresses received the most # of transactions in the last month, quarter, year
Which addresses received the most transaction volume (worth) in the last month, quarter, year
Over all the addresses, group the transactions into buckets by value.
How many tx in the 0.01-0.1 ETH range went to Tornado?
How many in the 0.1-1ETH range?
How many in the 1-10ETH range?
How many in the 10-100 ETH range?
How many above 100 ETH? (split further if better)

Introduction

What is Tornado Cash

Tornado.Cash is a fully decentralized, non-custodial protocol that improves transaction privacy by breaking the on-chain link between the sender and recipients’ addresses. To improve privacy, Tornado.Cash uses a smart contract that accepts ETH and other tokens from one address and allows them to withdraw to a different address. These smart contracts act as a pool that mixes all the deposited assets and generates a private key proving that you performed the deposit operation. Then, the sender can use this private key to withdraw the deposited funds into any address at the time of their choosing.

Tornado.Cash has gained popularity due to the rise in crypto incidents. It is often the go-to place for many hackers to store their stolen funds. In our previous articles, we discussed how we identified stolen funds based on the transactions’ behaviors. Today we will look at another incident of how we identify stolen funds using transaction behaviors.

The U.S. Treasury Department has sanctioned the Ethereum coin mixing tool Tornado Cash. Americans won’t be allowed to interact with the mixer and will be required to report any asset on Tornado Cash to the Office of Foreign Assets Control (OFAC).

In a Monday press release, the body also placed forty-four USDC and ETH addresses linked with the tool on its list of Specially Designated Nationals. The department believes individuals and groups have laundered more than $7 billion worth of crypto using the mixer since 2019, including a $625 million heist of Axie Infinity’s Ronin Network by North-Korean-based Lazarus Group.

Tornado Cash, which makes transactions private by pooling them together, has been at the forefront of several recent hacks, including a $375-million Wormhole attack in February and a $100-million Horizon Bridge breach in June.

Method

To solve this question,

I first found the Tornado Cash addresses from the flipside_prod_db.crosschain.address_labels table, then merged with the ethereum.core.fact_event_logs table and limited the transactions with the condition event_name = 'Deposit'. Since all the events of a transaction were recorded in this table, I used distinct to remove duplicates. Then I set the time period with the time condition. For the categories, I counted the addresses related to the Ethereum deposit with the rest of the ERC 20 tokens separately. I used the ethereum.core.ez_eth_transfers table for Ethereum deposits to Tornado Cash addresses and got the answers in Ethereum. Since Tornado Cash only had 4 addresses for Ethereum deposits, I couldn't create more categories and as far as I know, it accepts the same amounts for deposits. For the other category, i.e. tokens other than ethereum, I used the ethereum.core.ez_token_transfers table and divided the dollar amount by the price of ethereum on the same transaction day and got the amount in ethereum. And in the end, I assigned more categories for these tokens

For this analysis, I only checked Ethereum network addresses

Chart & Analysis

The graphs in front show the number of transactions for each Tornado Cash address.
In the last year, the addresses where Ethereum was deposited recorded more than 9 thousand transactions.
DAI related addresses (10000 and 100000) have also recorded over 1000 transactions
Other addresses have had fewer transactions and it can be said that the rest of the addresses have recorded less than 1000 transactions.
Among the total transactions of the last 1 year, the top 5 Tornado Cash addresses that had the most transactions
1 eth address includes 33.4% of all transactions
10 eth address includes 32.3% of all transactions
100 eth address includes 18.5% of all transactions
0.1 eth address includes 12.8% of all transactions
100000 DAI address includes 2.92 % of all transactions

In the time period of the last 3 months, the results have been almost a year, with the difference that the numbers have naturally decreased and that the number of transactions for the 0.1 eth address has become very close to the 100 eth address, and the second case is that among the 5 addresses that have had the most transactions The 100000 DAI address has been replaced by the 10000 DAI address
top 5 Tornado Cash addresses that had the most transactions
1 eth address includes 35% of all transactions
10 eth address includes 25.9% of all transactions
100 eth address includes 18.3% of all transactions
0.1 eth address includes 17.8% of all transactions
100000 DAI address includes 3 % of all transactions

In the time frame of the last 1 month, the results are almost the same as the last 3 months, with the difference that the numbers and figures are naturally lower than the last 3 months and that the number of transactions of the 0.1 eth address has doubled that of the 100 eth address, and the second case is that among 5 addresses that have the most transactions
The address of 10000 DAI has been replaced by the address of 1000 USDT
top 5 Tornado Cash addresses that had the most transactions
1 eth address includes 38.1% of all transactions
10 eth address includes 25.3% of all transactions
0.1 eth address includes 18.3% of all transactions
100 eth address includes 9.73% of all transactions
1000 USDT address includes 4.05 % of all transactions

The next two graphs show the total volume of deposits to different Tornado Cash addresses Observations show that among the 4 ethereum addresses, Tornado Cash: 100 ETH had the most deposits over time, the amount deposited to this address is 434.6 thousand ethereum.
The rest of the Ethereum addresses have total deposits below 71 thousand Ethereum

Among the addresses of ERC20 tokens (addresses other than the Ethereum address), a lot of deposits can be seen in Tornado Cash address: 10 wbtc, and so far 184.74 thousand Ethereums have been deposited to this address.
The Tornado Cash address: 100,000 DAI also has high numbers in deposits. In this address, 134.53 thousand Ethereums have been deposited so far.
- The rest of the addresses have deposited less than 17,000 Ethereum so far.

The next two charts categorize the volume of transactions on the Ethereum scale, and each category shows the number of transactions of each volume
Among Ethereum transactions, the most transactions are in the category 1 to 10 of Ethereum, the number of transactions in this category is 7006.
The next category is 0.1 to 1 Ethereum, which is 6309
The next category is 0 to 0.1 Ethereum, which is 5139
The next category is 10 to 100 Ethereum, which is 4347

The next chart is the deposited ERC20 tokens grouped by Ethereum scale
In this measurement, the largest number of transactions in the category of 10 to 100 Ethereum And the lowest is in the category of 0 to 0.001 Ethereum

Conclusion

Tornado.cash: 1 eth This address had the most deposits in the last year, 3 months and 1 month
tornado.cash: 100 eth This address has had the largest amount of Ethereum deposits over time
I considered all the transactions on the ethereum scale, now I will tell here both ethereum and other ERC20 tokens deposited to Tornado addresses.

The number of transactions whose volume was between 0.01 and 0.1 Ethereum was 5532.
The number of transactions whose volume was between 0.1 and 1 Ethereum was 8450.
The number of transactions whose volume was between 1 and 10 Ethereum was 10,167.
The number of transactions whose volume was between 10 and 100 Ethereum was 8821.
The number of transactions whose volume was more then 100 Ethereum was 1219 .

Contact data

-> the writer : sajjadsmoke -> discord : sajjadsmoke#5567

Thanks for reading !

Tornado Cash Addresses