Treasury’s GENIUS Act Report Backs Mixers, But Wants a New ‘Hold Law’ For Crypto

bitcoinistPublished on 2026-03-09Last updated on 2026-03-09

Abstract

The U.S. Treasury's GENIUS Act report acknowledges the legitimate privacy benefits of cryptocurrency mixers for lawful users, such as protecting personal or business transactions. However, it highlights the misuse of these tools by illicit actors like North Korean cyber units and ransomware groups to launder funds. To address this, the report proposes a new "digital-asset-specific hold law" that would allow regulated platforms to temporarily freeze suspicious transactions, giving law enforcement time to act without disrupting legitimate privacy-focused usage. The report is part of a broader effort to balance financial innovation and security under the GENIUS Act framework.

Treasury sent Congress its GENIUS‐Act‐mandated report on “innovative tools” to fight crypto‐enabled illicit finance.

A Crypto’s “Hold Law” And A Privacy Paradox

In a 32-page report submitted to the US Congress this March, the U.S. Treasury Department has endorsed lawful uses of crypto mixers (a service that takes in cryptocurrency from many different users, mixes all those coins together, and then sends each user back an equivalent amount from the pool, but from different addresses than the ones they used to deposit) in favor of privacy.

However, it has also urged lawmakers to create a new “digital‐asset‐specific hold law” so platforms can freeze suspicious funds.

Mixers, Privacy And DPRK

The report notes favorably that mixing and similar tools “can be used by lawful users seeking to enhance financial privacy on public blockchains,” including for “protecting sensitive information about personal wealth, business transactions, or charitable donations from public view. It adds that Treasury “recognizes that privacy‐enhancing technologies, including mixers and other obfuscation tools, may serve legitimate purposes when used by compliant actors in line with applicable AML/CFT requirements.”

On the other side, the same report also stresses that North Korea’s cyber units and major ransomware crews rely on mixers, cross‐chain bridges, and rapid swaps as core infrastructure to launder massive hauls from hacks and fraud. The report cites billions of dollars in stolen digital assets tied to DPRK actors and details how those funds are pushed through mixers and into stablecoins before being bridged and cashed out, using the same tools that ordinary users might pick for privacy.

What The “Hold Law” Would Do

Therefore, to tackle this paradox, the report proposes a “hold law” that would ensure that legitimate, clean, users keep their privacy while unlawful or suspicious activity can be addressed. Under the proposal, crypto exchanges and other regulated platforms would gain a clear and legal “pause button” for suspicious funds. The report recommends that “Congress establish a digital‐asset‐specific statutory ‘hold’ authority” that would allow platforms “to temporarily retain or delay the movement of digital assets associated with suspected illicit activity while appropriate legal process is pursued.” Firms could temporarily hold or delay those assets when strong red flags appear, with statutory cover for doing so.

The idea would be to give law enforcement time to act against ransomware crews, large fraud schemes, or state‐sponsored hackers, while limiting the tool to narrowly defined, high‐risk cases so routine customer flows are not frozen by default.

TradFi and Legacy media have often linked mixers to money laundering, with Tornado Cash as the obvious cautionary tale. Ethereum co‐founder Vitalik Buterin has repeatedly argued that mixers are neutral tools, even saying he used Tornado Cash to make a private donation to Ukraine, and is now backing ‘compliant’ designs like Privacy Pools that aim to protect on‐chain privacy without commingling with known dirty funds.

Another Piece On The GENIUS Act Puzzle

The report is part of the broader GENIUS Act framework, the law Trump signed to create a federal regime for payment stablecoins and push “innovative” tools against illicit finance. It fulfills a mandate for Treasury to spell out how AI, digital identity, and blockchain analytics should be used under a risk‐based AML approach.

The report also proposes a preferred tech stack (AI, digital ID, blockchain analytics, APIs) that regulated platforms should deploy under a risk‐based AML approach.

BTC's price trends to the downside on the daily chart. Source: BTCUSD on Tradingview

Cover image from ChatGPT, BTCUSD chart from Tradingview

Related Questions

QWhat is the main purpose of the GENIUS Act report submitted by the U.S. Treasury Department?

AThe GENIUS Act report outlines 'innovative tools' to fight crypto-enabled illicit finance, endorsing lawful uses of crypto mixers for privacy while proposing a new 'hold law' to freeze suspicious funds.

QHow does the report view the use of crypto mixers by lawful users?

AThe report recognizes that mixers and other privacy-enhancing technologies can serve legitimate purposes for lawful users seeking financial privacy, such as protecting sensitive information about personal wealth or business transactions, when used in compliance with AML/CFT requirements.

QWhat specific legislative measure does the Treasury Department recommend to address suspicious crypto transactions?

AThe Treasury Department recommends that Congress establish a digital-asset-specific statutory 'hold' authority, allowing platforms to temporarily retain or delay the movement of digital assets associated with suspected illicit activity while legal process is pursued.

QAccording to the report, how do malicious actors like North Korea's cyber units utilize crypto mixers?

ANorth Korea's cyber units and ransomware crews use mixers, cross-chain bridges, and rapid swaps as core infrastructure to launder massive amounts of stolen digital assets, often pushing funds through mixers into stablecoins before cashing out.

QWhat broader framework is this report a part of, and what additional tools does it propose for regulated platforms?

AThe report is part of the GENIUS Act framework, which aims to create a federal regime for payment stablecoins and combat illicit finance. It proposes a tech stack including AI, digital identity, blockchain analytics, and APIs for regulated platforms under a risk-based AML approach.

Related Reads

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

Coldcard Hardware Wallet Hacked: Losses Mount Due to Vulnerable Seed Generation A critical vulnerability in Coldcard hardware wallets has led to a continued wave of fund thefts. According to Galaxy Research, the total stolen has reached 1,367.05 BTC (approx. $88.6 million) from 4,585 addresses, a significant increase from the initial 594.5 BTC reported on July 30, 2026. Most of the stolen funds remain on the attackers' addresses. The issue is not with the current firmware, which Coinkite has updated, but with seed phrases generated on vulnerable devices between March 2021 and the release of fixed firmware versions. Due to a programmer error, devices switched from using a hardware random number generator to the software-based Yasmarang generator, which was initialized with publicly accessible data like the chip's serial number. This made the seed phrases predictable through offline brute-force attacks, meaning wallets remain at risk until funds are moved to a new wallet generated with the patched firmware. Affected devices include Mk2/Mk3 with firmware 4.0.1–4.1.9 (and up to 5.0.3), Mk4/Mk5 up to version 5.6.0, and Q models up to 1.5.0Q. The only exceptions are seeds created with a high-entropy method like at least 50 independent dice rolls or a strong unique BIP-39 passphrase. All other owners must generate a new seed on the fixed firmware and transfer their assets. A case highlighting the human impact involves a 39-year-old long-term investor who lost 2 BTC (approx. $130,000) in minutes. He had accumulated the Bitcoin over eight years through physical labor, viewing it as a financial lifeline and a retirement plan in a country suffering from hyperinflation. His story underscores that even conservative "buy and hold in cold storage" strategies can be compromised by such underlying technical flaws. From a technical perspective, this incident echoes historical failures where weak random number generators undermined cryptographic security, challenging the assumption that offline storage is automatically foolproof.

cryptonews.ru4h ago

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

cryptonews.ru4h ago

Trading

Spot
活动图片