It does break the on-chain trail. It replaces it with a database that has your passport in it.
The usual improvised approach is to send SOL to an exchange, wait, and withdraw to a different wallet. On chain, the connection really does disappear — the deposit goes to a hot wallet shared by thousands of users, and the withdrawal comes from a different one. It looks like it worked.
It moved the record from a public ledger, where it is anonymous-ish, into a private ledger where it is attached to your verified identity. The exchange knows both sides of the trade with certainty. That record is retained for years, is available to regulators and law enforcement on request, and is exposed to every data breach the company ever suffers. You have not removed the link; you have handed it to a single party and taken their word about who sees it.
| Centralised exchange | TornadoSol | |
|---|---|---|
| who holds your funds | the exchange | a program with no admin withdrawal instruction |
| identity required | full KYC | none |
| who can link the two sides | the exchange, permanently | nobody, if the pool is deep |
| can your funds be frozen | yes, at will | no freeze instruction exists |
| failure mode | account locked, funds held | lose your note, funds stranded forever |
An exchange is not strictly worse; it is differently risky. It has support staff, and if you lose your password you can recover your account. TornadoSol has no support and no recovery — lose the note and the money is gone permanently. What it does not have is a company that can freeze your balance, a database linking your name to your transfers, or a compliance department deciding whether your withdrawal is allowed today.