Not every dollar sitting in a crypto wallet can actually go anywhere. Arkham Intelligence now spells that out, listing frozen assets separately inside its portfolio module. The blockchain analytics platform's update launched on November 5, 2026, splitting a wallet's holdings into two buckets: what can move and what is stuck. At rollout, the feature covers three major stablecoins: USDC, USDT, and USDT0.

How the frozen asset view works

The centerpiece of the update is a new "Frozen" button within the portfolio module. Selecting it surfaces digital assets that are frozen, locked, blacklisted, or destroyed, and keeps them apart from the liquid balance so that headline portfolio values no longer obscure immobilized funds. In effect, the module now answers two different questions: how much a wallet holds, and how much of it can actually be moved.

At launch, the feature covers USDC, USDT, and USDT0 — Tether's omnichain version of USDT, which circulates across multiple blockchains — with Arkham planning to extend support to additional tokens. Stablecoins are where freezes tend to bite hardest, since issuers such as Tether and Circle retain the ability to freeze tokens at the contract level: once an address lands on an issuer's blocklist, the token contract itself rejects transfers to and from it. USDT and USDC are also the two largest stablecoins by circulating supply, so contract-level freeze power at these issuers reaches a substantial share of stablecoin liquidity.

Arkham demonstrated the feature using the entity it labels "Binance Hacker." That entity reportedly holds approximately $5.8 billion in total digital assets, of which around $2.6 billion is currently frozen. The breakdown comprises $1.77 billion in USDT and $824.72 million in USDC.

The breach that set the stage

The example stems from October 29, 2026, when a breach of Binance's hot wallet led to an estimated loss of $6.01 billion. Hot wallets are internet-connected wallets that exchanges use to process day-to-day deposits and withdrawals, keeping them continuously reachable online in contrast to offline cold storage. In the aftermath, stablecoin issuers including Tether and Circle froze substantial amounts of the affected assets. Arkham tracked $2.80 billion as frozen shortly after the breach, while the figure in the platform's current example for the "Binance Hacker" entity now sits at around $2.6 billion.

Before this update, Arkham's platform already offered real-time holdings data for tracked entities. Users could also aggregate their personal portfolios by connecting wallets and exchanges, pulling balances across multiple wallets and chains into a single view.

What it means for traders, investigators, and compliance teams

When a hacker's wallet displays billions in holdings, the frozen view clarifies how much of that loot is realistically movable. A thief sitting on approximately $5.8 billion signals a crisis still unfolding; a thief with around $2.6 billion of it locked up represents a partially contained one.

For compliance teams, the feature offers a faster way to separate live exposure from immobilized balances. Arkham pitches the tool at a range of users, from individual traders through to compliance departments, with the frozen view designed to help them gauge actual liquidity rather than face-value totals.

Everyday traders receive a quieter but still useful benefit. Anyone holding stablecoins across several wallets can now see whether a portion of their balances has been caught in an issuer freeze, rather than discovering it at the moment they attempt to move funds.

There are limitations. Coverage starts with only USDC, USDT, and USDT0, so frozen or locked holdings in other tokens will not be flagged separately until Arkham expands support. For wallets holding other freezable assets, the displayed liquid figure may still overstate what is truly movable until coverage widens.

The other thread to follow is the Binance breach itself. The gap between the $2.80 billion Arkham tracked as frozen shortly after the incident and the roughly $2.6 billion shown in its current example can now be monitored directly within the platform, rather than pieced together from scattered on-chain data and issuer announcements.