The information provided in this article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry a high degree of risk. Always conduct your own research.

USDT Frozen: We Counted What Tether and Circle Really Blocked in the Binance Hack

Tether and Circle report freezes worth about $2.4 billion. We queried the contracts ourselves: 1.18 billion USDT and 823 million USDC are frozen on the attacker address. About 700 million USDT were already gone. How stablecoin freezes work and whether Tether can freeze your USDT too.

Stack of Tether coins wrapped in heavy chains with a padlock, covered in frost
5 min read
Share:
Categories: Hacks & Security

How much USDT is really frozen in the Binance hack? Counted directly in the Tether and Circle contracts: the attacker address "Binance Hot Wallet Exploiter 2" holds 1,175.5 million USDT and 823.0 million USDC, and both balances are frozen. That is about $2.0 billion the attacker can no longer move. But about 700 million USDT had already been pushed to two new addresses, and those were empty when Tether blacklisted them. Measured on October 29 at about 22:50 UTC.

What happened tonight is in our Binance hack report and our crypto crash timeline.

What is really frozen in the Binance hack?

Tether CEO Paolo Ardoino reports more than 1.567 billion USDT frozen, Circle CEO Jeremy Allaire more than 800 million USDC. We queried the contracts' blacklist for every known attacker address:

AddressUSDTUSDCStatus
0x5227…2f8c (Exploiter 2)1,175.5M823.0Mboth frozen
0x9749…C7620 (500M received at 20:30 UTC)0blacklisted but empty
0x0Ddf…697e0 (200M received at 20:33 UTC)0blacklisted but empty
0x8532…43D4195,460 ETHcannot be frozen

Source: blacklist and balance functions of the USDT and USDC contracts queried via a public Ethereum node, transactions via Blockscout. The difference to Ardoino's 1.567 billion therefore sits on other addresses that could not be conclusively identified by press time.

Magnifying glass over a map of connected dots and red threads
AI-generated illustration

The 700 million USDT that left before the freeze

The attacker moved fast. At 20:30 and 20:33 UTC he sent 500 and 200 million USDT to two fresh addresses, about ten minutes after draining the Binance wallet and long before Tether reacted. From there the funds moved on within 25 minutes:

  • 175 million and 190 million USDT to two further addresses,
  • 145 million USDT into one smart contract and 100 million into another,
  • about 10 million USDT swapped directly via Uniswap.

When Tether blacklisted the first two addresses, they were empty. The same pattern showed in the Bitget hack in September, when stablecoins were swapped within minutes and only about $318,000 could be frozen, as Decrypt reported. This time Tether was faster on the bulk.

How can Tether freeze USDT?

USDT and USDC are not coins like Bitcoin but tokens issued by a company. The contract has a blacklist: once Tether adds an address, it can no longer send USDT. Circle has the same power over USDC and says it works with law enforcement:

Coins trapped in the clear ice of a frozen river at night
AI-generated illustration

More on the Binance hack

Can Tether freeze my USDT?

Technically yes, any address can be blacklisted. In practice it hits addresses linked to theft, fraud or sanctions, usually on a tip from investigators. Holders of USDT from clean sources who do not trade with hacked addresses are generally not affected. That risk is the price of stablecoins having an issuer that can step in, as it did tonight.

What the freeze means for Binance customers

Frozen does not mean returned. The roughly $2 billion is blocked, and Tether and Circle could later reissue it to the victim. Still open are the 700 million USDT that moved on and the 195,460 ETH nobody can freeze. How Binance covers the rest is the key question of the night. The withdrawal status is in our article Binance withdrawals after the hack; devices for self-custody are in our hardware wallet comparison.

This article is not investment advice.

FAQ: frozen USDT

Transparency note: This article was produced with the assistance of artificial intelligence and reviewed by our editorial team before publication. All figures and claims were checked against the primary sources linked in the text. The feature image was generated with AI.

Related articles

Which topics should we dive deeper into?

Select what genuinely interests you. Your picks feed directly into our editorial planning.

Crypto news that's actually worth your time.

Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.

Subscribe

More on this topic

View All

More from CryptoTicker