Tornado Cash is a mixer that does not directly record the connection between addresses, using privacy techniques to hide the origin and destination of transactions. However, it records certain events that, when combined with other analyses and external information, can help identify patterns.
In other words, although transactions within Tornado Cash are designed to be private, by combining public blockchain data, deposit and withdrawal timings, and other related signals, it is possible to develop analytical patterns that help detect movement of funds exiting the mixer.
You might think: “But when I use Tornado Cash, the trail disappears I regret to disappoint, but with advances in blockchain technology and intelligence tools, these methods are no longer 100% effective. The blockchain is a public ledger and every interaction is recorded in its blocks. The secret is to deeply read this data, decode function parameters, use comparison algorithms, and then see the connection.
There may not be a direct link showing that A sent to B, but by analogy: if José has only two children, and Pedro is João’s brother and João is José’s son, then Pedro is probably José’s son as well. You might think again:“But that analysis doesn’t directly connect the addresses". If we look at only that data in isolation, no. However, by analyzing the transaction behavior of one address with other addresses, or a network of them, if at least one has KYC, combining history and other information, it is possible to conclude with evidence that an address belongs to a specific user.