Blockchain asset-recovery investigator Darcy, co-founder of FlashRescue, has disclosed that targeted funds were moved out of a wallet while Tether was actively working to freeze them, exposing a time gap in the stablecoin issuer's on-chain freeze execution. USDT is the largest stablecoin by market capitalization, and Tether's ability to freeze tokens stems from administrative control embedded in the smart contracts governing USDT on each chain — a feature that distinguishes centrally issued stablecoins from truly permissionless assets.

The finding shifts scrutiny onto Tether, which has historically been praised for its responsiveness in freezing flagged or stolen funds, particularly in contrast to its main competitor, Circle (USDC). While Circle has faced repeated criticism throughout 2026 for rarely exercising its freeze authority, Tether is now being questioned about the effectiveness of the freezes it does carry out.

Darcy, who posts on X as @DarcyAri and conducts joint investigations with partner firms, reported on August 6, 2026, that in a recent case, flagged funds at a specific address were transferred even as Tether's freeze was being processed. The delay reduced the total amount that could ultimately be frozen.

The criticism centers on a significant interval between the submission of a freeze proposal and its finalization on the blockchain. This contrasts sharply with Circle's well-documented inaction. Circle CEO Jeremy Allaire stated at a press conference in Seoul that the USDC issuer will only freeze a wallet "at the direction of law enforcement or the courts."

On-chain investigator ZachXBT has identified more than a dozen cases since 2022 in which Circle declined to exercise its freeze power, including the roughly $280 million Drift Protocol exploit linked to North Korea. Across these cases, approximately $420 million in illicit funds escaped, according to ZachXBT's findings. Separately, Wisconsin prosecutors filed a criminal complaint against Circle after the company stated it could not comply with a warrant to recover a scam victim's USDC, as documented by the International Consortium of Investigative Journalists.

An analysis of 2,955 Tether freeze events across the Ethereum and TRON networks found that the average time between a freeze proposal and its execution is 2 hours, 16 minutes, and 15 seconds. The freeze mechanism is governed by a multisignature wallet, which investigators identified as the root cause of the delay. Multisignature arrangements require multiple authorized parties to approve a transaction before it is broadcast, adding coordination overhead that can create a exploitable window when speed is critical.

According to the analysis, at least 60 addresses fully emptied their holdings before freezes could take effect, transferring a combined $20.4 million in USDT. These transfers began an average of just 14 minutes after the freeze proposal was submitted, with the bulk of funds moved within 15 minutes. An additional 113 addresses succeeded in partially relocating assets totaling approximately $35.5 million before execution.

The most prominent public illustration of this gap came in Tether's July action against Iran's central bank. After OFAC sanctioned four TRON wallets that had received over $165 million in stablecoins, Tether locked $131 million — but approximately $34 million had already been moved by the time the freeze was applied. Tether's Iran-linked freezes now total roughly $475 million, including a separate $344 million lock in April. While the lost amount represents a small fraction of the overall seizure, investigators caution that a freeze mechanism with such a wide execution window could be exploited by sophisticated actors.

Tether has stated that it coordinates "directly with investigators during active cases, rather than reacting after funds have been dispersed." The company reports working with more than 340 law enforcement agencies across 65 countries on over 2,300 cases, assisting in the freezing of more than $4.4 billion in assets. The tension between Tether's extensive cooperation record and the execution-window findings underscores a structural challenge: centralized freeze authority offers a recovery tool unavailable in most of crypto, but its practical utility depends on speed that current governance mechanics may not reliably deliver.

In an August 4 post regarding the Gate exchange theft, Darcy noted that recovering stolen assets becomes nearly hopeless once funds land in an address and commingle with unrelated money, as Tether will rarely freeze a pool it cannot cleanly attribute to illicit activity.