Official domains

Privacy tools attract convincing clones. There is exactly one place TornadoSol runs.

Why this page exists

A cloned mixer front-end is cheap to build and hard to spot. It looks identical, because it is a copy of the real page — but the deposit address belongs to the attacker, or the note-generation code has been altered so the attacker can reconstruct your note and withdraw before you do. You would not find out until your withdrawal failed.

Before you send anything

• Read the address bar character by character. Look for inserted hyphens, swapped letters, and lookalike domains ending in a different suffix.
• Confirm the connection is HTTPS and the certificate covers this domain.
• Reach the site from a bookmark you created yourself. Do not use links from social media, search ads, chat groups or direct messages.
• Be suspicious of any page or person asking you to paste a note anywhere other than the withdraw tab. Support staff do not exist here and would have no use for your note except to spend it.

What TornadoSol will never do

It will never message you first, never ask for your note by email or chat, never ask for a seed phrase or private key, and never ask you to "verify" a wallet by sending funds somewhere. There is no support channel that could legitimately need any of those things.