Operation TorNado Seizes $234 Million and Nets 354 Arrests

U.S. authorities and international partners announced on Nov. 12 that a 14-country darknet drug enforcement operation produced 354 arrests and roughly $234 million in cash and cryptocurrency seizures. The coordinated action, named Operation TorNado, also removed about 5.7 metric tons of narcotics and 209 firearms from circulation.

The operation ran from May 2025 through October 2026, an 18-month enforcement window that spans two calendar years. U.S. agencies accounted for 132 of the arrests, 4.8 metric tons of seized drugs and $166 million in confiscated assets. Put in perspective, the American share of seizures alone equals more than three-quarters of the total haul by value.

Which countries took part?

Arrests outside the United States included 59 in the United Kingdom, 45 in Hungary and 41 in Germany, according to the announcement. European operations together accounted for close to a metric ton of seized drugs and more than €60 million in cash and cryptocurrency. The remaining arrests spread across the other participating jurisdictions, though officials did not provide a full country-by-country breakdown.

The three largest non-U.S. contingents alone — the U.K., Hungary and Germany — represent 145 arrests. That is more than the entire U.S. total, which signals where the operational weight of European enforcement fell.

What did the operation target?

Investigators focused on opioid trafficking networks and on vendors and buyers active on dark web marketplaces that law enforcement had previously compromised. Fentanyl figured prominently in the seized narcotics, with officials describing a significant share of the 5.7-metric-ton haul. The compromise-first approach means some of the targeted marketplaces were already under surveillance before arrests began, though officials did not specify which platforms or for how long.

Operation TorNado continues a lineage of Joint Criminal Opioid and Darknet Enforcement (J-CODE) team operations. It follows Operation SpecTor in 2023 and Operation RapTor in 2025. The cadence suggests these sweeps are now near-annual events rather than one-off actions.

What are the unanswered questions?

The announcement is heavy on aggregate figures and light on structure. It does not name the compromised marketplaces, identify the distribution of the $234 million between cash and cryptocurrency, or break down seizures by chain or token standard. It also does not say how many of the 354 arrests have led to charges, convictions or extraditions.

The $234 million figure, roughly $13 million per month across the operation's duration, is a headline number whose composition remains undisclosed. Until agencies publish case-level detail, the cryptocurrency share cannot be independently verified against on-chain records.

The takeaway in plain words: this was a large, coordinated, multi-year enforcement action, but the public data so far describes outputs, not outcomes.

What comes next?

Prosecutions stemming from the 354 arrests will unfold across multiple jurisdictions, with U.S. federal courts likely handling the 132 domestic cases first. If prior J-CODE operations are a guide, asset forfeiture proceedings and additional charges against vendors identified through compromised marketplace data will continue into 2027.