Fastest Check for an Old Tornadocash Withdrawal Note
An old deposit note can still be technically usable only if its secret data remains intact and its corresponding nullifier has not already been spent. That does not make withdrawal automatically appropriate or available through every interface. The practical question is whether the note is genuine, unspent, tied to the right pool, and handled in a way that does not create legal, security, or privacy problems.
Separate the note from a wallet balance
A note is not a wallet balance or a recoverable account password; it is the private data required to prove a claim against a particular pool. The protocol’s fixed-amount pools create that note at deposit time, while its Nova design uses a connected wallet model instead. The distinction matters because an old fixed-pool note cannot be recreated from a public transaction hash alone. The protocol documentation explains that the private note functions like the key needed to access a fixed-pool deposit.
A zero-knowledge proof is the cryptographic mechanism that lets someone prove a statement is valid without revealing the underlying secret. Here, it can show that the holder knows valid deposit secrets without publicly identifying the original deposit.
Test the three conditions that decide the outcome
Three conditions decide whether an old record is technically meaningful: the note must be complete, its pool and asset denomination must match the original deposit, and its nullifier must remain unused. A nullifier is a one-time cryptographic marker derived from the secret; once it appears on-chain, the associated claim has been consumed.
- Missing or altered note: there is no ordinary password-reset path. The secret is the evidence.
- Wrong pool or network: a valid-looking note for one contract cannot claim funds from another.
- Spent nullifier: the contract should reject a second claim, preventing double spending.
The protocol’s technical description says its withdrawal logic checks both a valid proof and an unused nullifier. A Merkle tree—a hash-based structure that proves a value belongs to a larger set—helps establish that the original commitment exists without exposing which commitment it is.
Check the status before treating technical access as permission
Technical access and legal permission are different questions. On March 21, 2025, the U.S. Treasury announced removal of the economic sanctions against the protocol, while also telling U.S. persons to exercise caution around transactions involving malicious cyber actors or the DPRK. Treasury stated:
“We have exercised our discretion to remove the economic sanctions against Tornado Cash.” — U.S. Department of the Treasury
That announcement does not resolve the origin of particular funds, an exchange’s compliance decision, or rules outside the United States. Anyone facing a real old-note situation should keep records, avoid relying on anonymous “recovery” offers, and obtain qualified legal advice where the circumstances raise sanctions, proceeds-of-crime, tax, or reporting issues.
Protect the evidence before seeking help
Protecting the note is the fastest way to avoid turning a recoverable claim into a loss. Do not paste it into chat, send it to a supposed support agent, or upload it to an unfamiliar site. A Federal Reserve Bank of St. Louis review notes that anyone who learns the secret values can take the funds; it also notes that address reuse and transaction patterns can weaken privacy.
A separate Tornadocash reference guide can help distinguish a note, a transaction hash, a pool address, and a wallet address before any decision is made.
Check these FAQ answers
Can a transaction hash replace a lost note?
No. A transaction hash can show that a deposit occurred, but it does not disclose the private secret needed to prove control of it.
Does an unspent note prove that the funds are compliant?
No. “Unspent” is a technical state, not a conclusion about source of funds, legal obligations, or an institution’s compliance policy.
Should someone enter an old note into a random recovery tool?
No. Treat it like a private key. A recovery service that asks for the full note can potentially take control of the claim.