In the wake of a high‑profile cyber‑theft that targeted the cryptocurrency exchange Bitget, two of the world’s most influential stablecoin issuers—Circle, the company behind USDC, and Tether, the issuer of USDT—have taken decisive steps to limit the damage caused by the breach. The incident, which unfolded earlier this year, saw a hacker siphon off a sizable amount of digital assets from Bitget’s custodial wallets.
While the majority of the stolen value was converted into ether (ETH), a substantial portion remained in the form of USDC and USDT, the two most widely used stablecoins in the crypto ecosystem. Recognizing the urgency of the situation, Circle and Tether coordinated a rapid response aimed at immobilising the hacker’s ability to move the stablecoin portion of the loot. Both firms announced that they would place the offending wallet on a blacklist, effectively preventing any future transfers of USDC and USDT from that address. The blacklist is a tool that stablecoin issuers can employ to block transactions involving addresses that are suspected of illicit activity.
By blacklisting the wallet, Circle and Tether ensure that any attempt to send USDC or USDT from the compromised address will be rejected by the underlying smart contracts, rendering those particular tokens unusable for the attacker. The total value of the frozen stablecoins is estimated at approximately $318,000, a figure that includes roughly $200,000 worth of USDC and $118,000 worth of USDT. Although this amount represents only a fraction of the overall loss from the Bitget hack—most of the stolen funds were swiftly converted into ether, a blockchain-native cryptocurrency that does not have a comparable centralised control mechanism—the move by Circle and Tether is nonetheless significant.
It demonstrates that stablecoin issuers are willing to intervene when their tokens become entangled in criminal activity, even though they lack the legal authority to seize assets outright. Understanding the technical constraints is essential. Stablecoins such as USDC and USDT are built on blockchain platforms like Ethereum and Tron, where the token contracts include a list of addresses that are prohibited from sending or receiving the token. When an address is added to this list, the smart contract automatically rejects any transaction involving that address.
This mechanism is analogous to a bank freezing a suspect’s account, but it is executed through code rather than a court order. The advantage of this approach is its speed; once a decision is made, the blacklist can be updated almost instantly, and the restriction propagates across the entire network of wallets and exchanges that support the token. However, the same level of control does not exist for ether, the native cryptocurrency of the Ethereum network. Ether is not issued by a single entity; it is a decentralized asset that lives on the blockchain without a central authority that can intervene.
Consequently, once the hacker converted the stolen stablecoins into ether, that portion of the loot became effectively untouchable by Circle and Tether. This limitation highlights a broader challenge in the crypto space: while issuers of tokenised assets can exert some influence over the flow of their tokens, they cannot stop the movement of native blockchain currencies. The Bitget heist underscores the importance of robust security practices for exchanges and custodial services.
Bitget, a platform that offers futures trading, spot trading, and a range of other crypto services, suffered a breach that allowed an attacker to access hot wallets—online wallets used for day‑to‑day operations. Hot wallets are inherently more vulnerable than cold storage solutions, which keep private keys offline. After the theft was discovered, Bitget worked with law enforcement agencies and blockchain analytics firms to trace the flow of funds. The investigation revealed that the attacker moved a large portion of the proceeds into ether, likely to obfuscate the trail and take advantage of ether’s liquidity.
In response to the incident, the broader crypto community has called for greater collaboration between stablecoin issuers, exchanges, and regulators. Some experts argue that a unified blacklist, shared across multiple issuers and supported by major exchanges, could serve as a deterrent to criminals who rely on the fungibility of stablecoins to launder proceeds. Others caution that blacklisting must be balanced against the risk of over‑reach, ensuring that legitimate users are not inadvertently blocked due to false positives. From a regulatory perspective, the actions taken by Circle and Tether may be viewed as a form of self‑regulation.
Both companies have previously engaged with policymakers to develop frameworks that promote transparency and consumer protection. By demonstrating a willingness to act swiftly against illicit activity, they aim to bolster confidence among users and regulators alike. This proactive stance could influence future policy discussions around the responsibilities of stablecoin issuers in combating financial crime. For users who hold USDC or USDT, the blacklist means that any attempts to transfer tokens from the compromised address will fail, effectively rendering those particular tokens inert.
However, it does not affect the broader market or the usability of the stablecoins for other participants. The rest of the crypto ecosystem continues to operate normally, with exchanges still processing deposits and withdrawals of USDC and USDT from addresses that are not flagged. In summary, the coordinated effort by Circle and Tether to freeze approximately $318,000 worth of stablecoins after the Bitget hack illustrates both the potential and the limits of issuer‑level intervention in the crypto world.
While the blacklist can stop the movement of USDC and USDT from a known malicious address, it cannot reach assets that have already been converted into native cryptocurrencies like ether. The incident serves as a reminder that security, collaboration, and clear regulatory guidance are essential components in the ongoing battle against crypto‑related fraud and theft. As the industry evolves, stakeholders will likely continue to refine their tools and strategies to protect users and preserve the integrity of digital finance.