> Honest question: was GitHub legally obligated to delete the accounts of anyone who had contributed to the repos?
Tornado Cash is on the SDN list [1].
From [2]:
> Business transactions of any sort with SDNs are expressly prohibited and U.S. persons must block any property in their possession or under their control in which an SDN has an interest.
IANAL but it doesn't sound like much of a leap to say using GitHub falls within "business transactions of any sort".
Clarification question: Did GitHub delete the accounts of anyone who contributed to the repos? My guess would be owners and maintainers? Officially, Tornado Cash, the entity, is what's on the list, so I would think at the very least anyone who is formally tied to the entity.
Tornado Cash is on the SDN list [1].
From [2]:
> Business transactions of any sort with SDNs are expressly prohibited and U.S. persons must block any property in their possession or under their control in which an SDN has an interest.
IANAL but it doesn't sound like much of a leap to say using GitHub falls within "business transactions of any sort".
Clarification question: Did GitHub delete the accounts of anyone who contributed to the repos? My guess would be owners and maintainers? Officially, Tornado Cash, the entity, is what's on the list, so I would think at the very least anyone who is formally tied to the entity.
[1]: https://home.treasury.gov/policy-issues/financial-sanctions/...
[2]: https://www.visualofac.com/resources/sanctions-and-embargoes...