Tether, the issuer of the USDT stablecoin, has frozen more than $1.5 billion in tokens linked to the October 29, 2026, security attack on Binance. According to the company, the action was completed within 30 minutes of the incident, preventing the attackers from transferring, exchanging, or laundering the affected funds.

The US Federal Bureau of Investigation (FBI) has identified North Korea as responsible for the attack. The rapid intervention highlights the role stablecoin issuers can play in responding to cryptocurrency theft and coordinating with law enforcement agencies to restrict access to suspicious digital assets. By acting within half an hour, Tether prevented the attackers from moving more than $1.5 billion in USDT, demonstrating how centralized stablecoin controls can help contain the movement of stolen cryptocurrency.

Tether Highlights Cooperation With Law Enforcement

Tether's freezing mechanism allows the company to restrict transactions associated with specific wallet addresses. Once an address has been identified and targeted for enforcement action, this capability can prevent the funds it holds from being transferred or exchanged. The effectiveness of such interventions depends largely on how quickly the issuer receives information and coordinates with the relevant authorities.

In the Binance-related incident, the company indicated that its rapid response prevented the attackers from accessing alternative channels to move the funds. Tether CEO Paolo Ardoino said the incident demonstrated that USDT was not a suitable instrument for criminals seeking to conceal or move illicit funds. Bo Hines, CEO of Tether USA₮, described the intervention as a contribution to security efforts in the United States and internationally.

US authorities have repeatedly warned that cryptocurrency theft provides a significant source of revenue for North Korea, including funding for activities associated with its nuclear weapons program.

Tether Freezes Over $1.5 Billion From Binance Hack, Keeping Funds Out of North Korea's Reach. Read more:

— Tether (@tether) November 2, 2026

Post on X: https://x.com/tether/status/2117307332128329793?ref_src=twsrc%5Etfw

Previous Freezes Targeted Iran- and Russia-Linked Wallets

The Binance-related action follows several enforcement interventions by Tether during 2026, though it differs from those earlier cases in character: the previous freezes followed sanctions-related directives, while this one responded to an active theft that the FBI attributed to North Korea. In April, the company froze more than $344 million in USDT across two wallet addresses after receiving information from the US Treasury's Office of Foreign Assets Control (OFAC) and American law enforcement agencies. OFAC subsequently identified the addresses as associated with the Central Bank of Iran.

In July, Tether froze another $130 million across four wallets following an expansion of US Treasury sanctions. These interventions brought the company's Iran-related freezes during the year to nearly $550 million.

Separately, Tether froze approximately $23 million connected to Garantex, the sanctioned Russian cryptocurrency exchange, in an action conducted in cooperation with the US Secret Service.

OFAC Compliance and International Investigations

Tether said its wallet-freezing policy is aligned with OFAC's Specially Designated Nationals (SDN) List, which identifies individuals and entities subject to US sanctions.

The company also cited wallet addresses referenced in the Blumenthal report, claiming that it had frozen 99% of those addresses before blockchain analytics firm Chainalysis identified them as belonging to Iran. Tether characterized coverage surrounding the report as an attempt to spread misinformation about its compliance practices.

The company reported working with more than 360 law enforcement agencies across 73 countries on investigations involving illicit financial activities, including terrorist financing. The FBI and the US Secret Service have also been granted access to its investigative platform.

As of October 31, 2026, Tether said it had helped freeze more than 3,590 wallets containing approximately $1.6 billion in USDT for the US Department of Justice, the Secret Service, and the FBI.

Tether Reports More Than $7 Billion in Frozen USDT

Tether reported that it has frozen more than $7 billion in USDT held in secondary-market wallet addresses, with most of the funds connected to fraud, cryptocurrency theft, decentralized finance exploits, and exchange security breaches. The company added that approximately $1.2 billion in USDT obtained through fraud and theft had been returned to rightful owners and law enforcement agencies through token reissuance. The Binance-related freeze alone represents roughly one-fifth of the company's cumulative total, and whether the funds frozen in this case are ultimately returned through the same reissuance process is likely to become clearer as the investigation into the October 29 attack proceeds.

The latest Binance-related intervention reinforces the growing importance of cooperation between stablecoin issuers, blockchain analytics firms, and government agencies in addressing cryptocurrency-related crime. At the same time, the ability of centralized stablecoin issuers to freeze wallet balances highlights the distinction between decentralized blockchain infrastructure and the administrative controls maintained by individual token issuers.

As regulatory scrutiny increases, the effectiveness and transparency of these enforcement mechanisms are likely to remain important issues for the broader digital asset industry.

Source: CoinTrust