US authorities and their international partners have announced the results of Operation TorNado, a coordinated darknet drug crackdown that ended with 354 arrests across 14 countries and the seizure of approximately $234 million in cash and cryptocurrency.

The operation, announced on November 12, 2026, is being described as the largest takedown to date by the Joint Criminal Opioid and Darknet Enforcement (JCODE) team. The enforcement work itself spanned roughly a year and a half, running from May 2025 through October 2026.

Scope of the Seizures

Beyond the monetary haul, investigators confiscated about 5.7 metric tons of drugs, a significant share of which was fentanyl — the synthetic opioid at the center of the US overdose crisis. Authorities also recovered 209 firearms.

The United States carried the heaviest share of the enforcement action. American authorities made 132 arrests, seized 4.8 metric tons of drugs, and confiscated $166 million in assets domestically.

Europe accounted for much of the remainder. Law enforcement there seized nearly 1 metric ton of drugs along with more than €60 million in cash and crypto.

Arrests outside the US were spread across several countries:

• United Kingdom: 59 arrests
• Hungary: 45 arrests
• Germany: 41 arrests

The operation's stated focus was opioid trafficking networks whose customer base reportedly reached tens of thousands of American buyers. The geographic spread of the arrests underscores the defining feature of the JCODE template: international coordination against networks operating across borders.

Vendors and Buyers Both Targeted

TorNado did not stop at the sellers. The operation targeted both vendors and buyers who were active on dark web marketplaces that law enforcement had previously compromised. For buyers, the takeaway is that exposure does not scale with prominence: once a marketplace is compromised, the people purchasing through it fall within reach of the same investigation.

Part of a Longer Campaign

TorNado is not a one-off. It builds directly on two earlier JCODE efforts: Operation SpecTor in 2023 and Operation RapTor in 2025. Each has followed a similar template of international coordination, marketplace infiltration, and mass arrests. Three editions spanning 2023 to 2026 have turned these sweeps into a recurring enforcement cycle rather than isolated events.

Implications for Crypto

Cryptocurrency sits at the center of this story because it is a core component of how darknet markets function. The size of the seizure highlights a reality that privacy-minded users sometimes underestimate: funds moving on a public blockchain leave a trail, and authorities across multiple countries have clearly become comfortable following it.

The research behind the report frames the outcome as evidence that law enforcement is becoming more effective at tracking and disrupting the financial flows tied to drug trafficking. It also flags a persistent concern: dark web marketplaces have a track record of adapting after each crackdown. That adaptability is the angle to watch from here — whether new or retooled marketplaces move in to fill the space, as has happened after previous crackdowns.