Regardless Of the ultra secrecy with the protocol, some have argued that there might be a method to track transactions if there is a big deposit and low liquidity. The only real authorization afforded for the Operator would be the permission to update the “verifier” used by the deal. In https://unityfin.info/the-role-of-tornado-cash-in-protecting-blockchain-privacy/