First Digital has confirmed that it froze First Digital USD (FDUSD) stolen in the security incident at Binance, and is coordinating with the exchange to prevent the stolen tokens from moving further. On-chain monitors had earlier reported that the stablecoin issuer blacklisted an attacker-linked address holding roughly 3.4 million FDUSD.

The frozen balance is a small fraction of a far larger event — but it illustrates how a fiat-backed stablecoin behaves when stolen dollars attempt to leave the chain.

Issuer Confirms Blacklist Action

Blockchain analyst Specter linked a wallet holding about 3.4 million FDUSD to the Binance attacker, TokenPost reported. First Digital subsequently blacklisted the address, freezing the balance in place.

In a separate update, Chief Executive Vincent Chok said First Digital froze the FDUSD taken in the attack and is working with Binance to protect holders and stop further transfers of the stolen tokens, TokenPost reported. He described holder security as a shared responsibility between the issuer and the exchange, and said more details would follow as the joint response makes progress.

The action came through issuer control rather than a court order: the token can still display a value of one dollar on screen, while the named address can no longer spend it. Blacklists work at the address level, so the restriction applies to the flagged wallet rather than to FDUSD balances held elsewhere — a standard capability that the issuers behind USDT and USDC also maintain and have exercised against stolen and sanctioned funds.

Where the Freeze Fits in Binance's Own Account

In its Security Incident Update, Binance said its preliminary investigation suggests a compromised DevOps engineer's laptop may have allowed an attacker to reach a service container and submit unauthorized withdrawals. The exchange said it has found no evidence of a wallet private-key leak. The case now sits alongside other large crypto hacks in which stolen balances stop moving only when issuers or partners intervene.

Binance estimated the incident's total impact at approximately $6.3 billion. It said it has worked with blockchain partners to freeze affected assets, with about $3 billion frozen on-chain so far. The exchange also said it will cover losses through its SAFU fund — an emergency insurance reserve — and company funds, that user funds are safe, and that deposits and withdrawals were temporarily suspended while checks continue.

The 3.4 million FDUSD figure and the $6.3 billion figure answer different questions: one is a frozen balance on a specific address, while the other is Binance's estimate of the incident's total impact.

What a Freeze Signals

The episode raises a recurring question for tokens designed to track the dollar: who can still stop that dollar mid-flight? A blacklist does not indicate that reserves are impaired; it demonstrates that the issuer retained a kill switch. For holders who treat FDUSD as cash living on-chain, that switch functions both as a recovery tool and as a trade-off in trust — a token that can be halted is also a token that can be recovered.

First Digital's move is part of a wider freeze cascade following the Binance drain. Larger issuers can freeze far bigger balances, but a mid-tier dollar token freezing a few million still matters: it shows the same administrative design operating outside the usual USDT and USDC headlines. The promise of a dollar token includes administrative control that activates when an attacker's wallet is flagged.

Unknowns remain. Public reporting so far does not identify every frozen FDUSD address, does not map the exact recovery path for blacklisted balances, and does not say how much stolen FDUSD, if any, moved before the block. Chok tied further updates to progress in the joint response with Binance. The markers to watch from here are those joint announcements, any newly blacklisted FDUSD addresses, and word from Binance on when deposits and withdrawals resume.

The peg promise remains what it has always been. This week's development concerns who can freeze the tokens that stand behind that promise.