Protocols & Policy · Stablecoins
Tether says it froze more than $1.5 billion after Binance attack
The dollar-token issuer says it locked the funds within 30 minutes of the Oct. 29 attack. It named no addresses, and no one else has confirmed the figure.
Tether says it froze more than $1.5 billion after Binance attack
A private company that issues a dollar token says it locked more than $1.5 billion of it within half an hour of an attack. Tether, the issuer of the USDT dollar token, said in a release dated Nov. 2 that it "froze more than $1.5 billion in USD₮ within 30 minutes of the 29 October Binance hack" [1].
The first timed record of the claim is Tether's post on X linking the release, at 12:26 p.m. ET [2]. The FBI said in an alert on Oct. 31 that North Korea was responsible for the attack on Binance on or about Oct. 29 [3].
What Tether says it did
"By moving quickly, Tether stopped the funds before they could be transferred, swapped or laundered," the release said [1]. Paolo Ardoino, Tether's chief executive, said: "Within minutes of the hack, our team had frozen more than $1.5 billion" [1]. Bo Hines, chief executive of Tether USA₮, the company's U.S. unit, said the company "stopped more than $1.5 billion from reaching the people behind this attack" [1].
The mechanism
A dollar token is a digital token meant to be worth one U.S. dollar, backed by the issuer's reserves. As the issuer, Tether says it can freeze funds at an address "while they are still within reach," and it describes its practice as "a wallet-freezing policy aligned with OFAC's Specially Designated Nationals (SDN) List," the U.S. Treasury sanctions list [1].
That power is the limit on the product as well as its selling point: tokens held anywhere can be stopped by one company's decision.
The evidence
Tether gives no addresses, blockchains or transaction records for the Binance-related freeze, and neither Binance nor the FBI has given a figure for it, so nothing independent confirms the $1.5 billion [1][3].
The release sets the claim beside earlier freezes Tether says it made this year.
Figure 1. Freezes Tether says it made
| Freeze (as Tether describes it) | When | Amount |
|---|---|---|
| Binance-related, "within 30 minutes" | Oct. 29, 2026 | more than $1.5 billion |
| Iran-linked, "across two addresses" | April 2026 | more than $344 million |
| Iran-linked, "across four wallets" | July 2026 | $130 million |
| Iran-linked, this year | 2026 to date | nearly $550 million |
Source: Tether release, Nov. 2, 2026 [1]. All amounts are Tether's statements.
Tether says the April Iran-linked freeze was made "acting on information from the U.S. Treasury's Office of Foreign Assets Control (OFAC) and U.S. law enforcement," and that OFAC designated the addresses the following day [1].
The release also gives larger running totals, in its own units. It says that as of Oct. 31, Tether "had helped freeze more than 3,590 wallets holding approximately 1.6 billion USD₮ for the U.S. Department of Justice, Secret Service and FBI." It says it "has frozen more than 7 billion USD₮ in secondary market addresses (including the Binance freezes)," and that "approximately 1.2 billion USD₮ obtained through fraud and theft has been returned to its rightful owners and to law enforcement through reissuance" [1].
One figure in the release is not a freeze. After an April attack on the Drift exchange, the release says, "Tether committed $127.5 million to help affected users" [1].
The objection
Tether is the only source for the $1.5 billion, and the release is also a marketing document: it calls USD₮ "the worst possible choice for criminals" and contrasts Tether with "other issuers" that "can take days or weeks to act" [1]. A freeze also does not return anything by itself. Under Tether's own description, frozen tokens reach owners or law enforcement through "reissuance," a separate step [1].
The tell (Le Coin's view)
Le Coin's view: The claim worth reading closely is the clock, not the dollar amount. Thirty minutes is a statement about how fast one company can act on its own ledger, and the release presents that speed as a public good. It is also Tether's own account of how much control an issuer keeps over tokens it has already sold.
Stop
Tether said it froze more than $1.5 billion of its dollar token within 30 minutes of the Oct. 29 Binance attack, which the FBI has attributed to North Korea.
Sources
- Tether, "Tether Freezes Over $1.5 Billion From Binance Hack, Keeping Funds Out of North Korea's Reach," release dated Nov. 2, 2026. Accessed 1:09 p.m. EST Nov. 2. https://tether.io/news/tether-freezes-over-1-5-billion-from-binance-hack-keeping-funds-out-of-north-koreas-reach/
- Tether (@tether), post on X, Nov. 2, 2026, 12:26 p.m. ET. Accessed 1:10 p.m. EST Nov. 2. https://x.com/tether/status/2117307332128329793
- FBI, cyber alert on North Korea and the Binance attack, Oct. 31, 2026. Accessed 6:15 a.m. EST Nov. 2. https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack
Holding the Corner.
Not financial advice.