Circle and Tether Act to Freeze Hacker Wallet Following Large‑Scale Bitget Crypto Theft

In the wake of a high‑profile cryptocurrency robbery that targeted the Bitget exchange, two of the world’s most prominent stablecoin issuers—Circle, the company behind USDC, and Tether, the issuer of USDT—took decisive action to impede the further movement of the illicit proceeds. By adding the offending address to their internal blacklists, the firms effectively froze a portion of the stolen assets, specifically the stablecoins that they control, amounting to approximately $318,000.

While this measure represents a significant step toward curbing the flow of stolen funds, a substantial portion of the loot remains lodged in the form of ether (ETH), a cryptocurrency that falls outside the direct jurisdiction of these stablecoin issuers and therefore cannot be directly frozen. ## Background of the Heist Bitget, a major cryptocurrency derivatives platform, suffered a massive security breach in early August 2024. Hackers exploited a vulnerability in the exchange’s hot‑wallet infrastructure, gaining unauthorized access to a large pool of user assets. The attackers swiftly transferred the stolen funds into a single, newly created wallet address, effectively consolidating the loot and making it harder for investigators to trace individual transactions.

According to forensic analyses released by blockchain monitoring firms, the total value of the theft exceeded $100 million, making it one of the largest crypto robberies of the year. The hackers’ strategy involved moving the bulk of the stolen capital into ether, the native token of the Ethereum network, because ETH is highly liquid, widely supported across exchanges, and can be moved quickly without the need for custodial approval.

In addition to the ether, the perpetrators also siphoned off a sizeable amount of stablecoins—USDT and USDC—both of which are pegged to the U.S. dollar and are commonly used for trading and as a store of value within the crypto ecosystem. ## The Role of Circle and Tether Circle and Tether each operate the issuance and redemption infrastructure for their respective stablecoins.

When a user wishes to obtain USDC or USDT, they send fiat currency to the issuer, which then mints an equivalent amount of tokens on the blockchain. Conversely, when a user wants to redeem the tokens for fiat, the issuer burns the tokens and releases the corresponding dollars. Because of this custodial relationship, both companies maintain comprehensive databases that map wallet addresses to the underlying fiat reserves backing each token. Upon learning of the Bitget breach, the security teams at Circle and Tether conducted rapid investigations to identify any wallets that had received large inflows of their stablecoins from the compromised exchange.

Their analysis pinpointed a single address that had accumulated roughly $318,000 in USDT and USDC combined. Recognizing the potential for these assets to be laundered or further dispersed, the issuers exercised their contractual right to blacklist the address.

Blacklisting effectively prevents the wallet from receiving additional issuances of the stablecoin and blocks any redemption requests, thereby immobilizing the tokens within that address. ## Limitations of the Freeze While the blacklist action successfully locked down the stablecoins, it does not extend to the ether holdings.

Ether is a decentralized asset that lives on the Ethereum blockchain, and its movement is governed solely by the private keys that control the wallet. Neither Circle nor Tether has the technical authority to freeze ETH, as they do not issue or redeem it.

Consequently, the hackers retain full control over the majority of the stolen value, which remains in the form of ether. This limitation underscores a broader challenge in the cryptocurrency space: the difficulty of enforcing traditional financial controls on decentralized assets.

Even when custodial entities like stablecoin issuers intervene, they can only affect the tokens they directly manage. Assets that exist outside of these custodial frameworks—such as native blockchain tokens—remain beyond the reach of centralized enforcement mechanisms. ## Implications for the Crypto Industry The coordinated response by Circle and Tether highlights an emerging trend where stablecoin issuers are taking a more active role in combating illicit activity. By leveraging their unique position as custodians of fiat‑backed tokens, these companies can quickly identify suspicious flows and implement safeguards that traditional financial institutions might struggle to execute on a blockchain.

However, the incident also illustrates the need for a more holistic approach to security and compliance. As hackers increasingly diversify the types of assets they target—mixing stablecoins, native tokens, and even NFTs—regulators, exchanges, and custodians must collaborate to develop cross‑chain monitoring tools and legal frameworks that can address the full spectrum of crypto assets. ## What Can Users Do?

For individual investors and traders, the Bitget heist serves as a reminder to prioritize security best practices. Users should: 1. **Utilize hardware wallets** for long‑term storage of significant crypto holdings, reducing reliance on exchange hot wallets that are more vulnerable to attacks. 2.

**Enable two‑factor authentication (2FA)** and, where possible, multi‑signature controls on exchange accounts. 3. **Diversify risk** by not keeping all assets on a single platform and by regularly moving funds to cold storage.

4. **Stay informed** about the latest security advisories from reputable sources, including the issuers of the stablecoins they hold. ## Ongoing Investigation Law enforcement agencies, including the U.S.

Department of Justice and international cybercrime units, have launched joint investigations into the Bitget breach. Blockchain analytics firms continue to monitor the flow of ether and other assets associated with the hacker’s wallet, hoping to trace the funds as they move through mixers, decentralized exchanges, and other platforms. In parallel, Circle and Tether have pledged to cooperate fully with authorities, providing transaction data and any relevant on‑chain information that could aid in the recovery of the stolen funds.

While the frozen stablecoins represent only a fraction of the total loss, the action demonstrates that issuers are willing to employ every tool at their disposal to protect the integrity of their ecosystems. ## Conclusion The freezing of a wallet containing roughly $318,000 in USDT and USDC by Circle and Tether marks a notable intervention in the aftermath of one of the year’s largest crypto thefts. Although the majority of the stolen assets—held in ether—remain beyond the reach of these issuers, the blacklist serves as a deterrent and a signal that stablecoin providers are stepping up their anti‑money‑laundering efforts.

The incident underscores the ongoing tension between the decentralized nature of blockchain assets and the need for effective regulatory and custodial controls. As the industry evolves, continued collaboration among issuers, exchanges, regulators, and security experts will be essential to safeguard users and maintain confidence in the digital asset ecosystem.