In the wake of one of the most audacious cryptocurrency thefts of the year, two of the most influential stablecoin issuers—Circle, the company behind USDC, and Tether, the issuer of USDT—have taken decisive action to block further movement of a portion of the stolen funds. The incident in question involves a massive hack of the Bitget exchange, a platform that suffered a breach resulting in the loss of a substantial amount of digital assets.
While the majority of the stolen wealth was converted into ether (ETH), a cryptocurrency that operates on a decentralized ledger and cannot be directly frozen, the attackers also transferred a sizable portion of the loot into the two most widely used stablecoins: USDC and USDT. Recognising the potential for these stablecoins to be used to launder the proceeds or funnel them into other illicit channels, Circle and Tether jointly decided to place the offending wallet on a blacklist, effectively preventing any future transfers of USDC and USDT from that address. The hack on Bitget was first reported in early September, when the exchange disclosed that it had detected unusual activity on its hot wallet infrastructure.
Preliminary forensic analysis suggested that the attackers exploited a vulnerability in the exchange’s internal controls, allowing them to siphon off an estimated $300 million worth of crypto assets. Among the assets taken were large quantities of Bitcoin (BTC), ether, and a variety of altcoins, including the stablecoins USDC and USDT. While the bulk of the stolen funds were swiftly moved into ether—likely because of its liquidity and the relative ease of swapping it for other tokens—the attackers also attempted to diversify their holdings by converting a portion into stablecoins, which are pegged to the US dollar and are widely used for everyday transactions and cross‑border payments. Circle, which issues USDC, and Tether, the issuer of USDT, have long maintained that they possess the ability to monitor and, when necessary, intervene in the flow of their tokens to comply with regulatory requirements and to protect the integrity of the stablecoin ecosystem.
In this case, both companies acted in concert after receiving detailed reports from blockchain analytics firms that traced the movement of the stolen stablecoins to a single wallet address. By blacklisting that address, Circle and Tether have effectively rendered the USDC and USDT held there immobile.
Any attempt to transfer the tokens out of the flagged address will be rejected by the issuers’ smart contracts, meaning that the funds will remain trapped unless the blacklist is lifted. The decision to freeze the wallet is significant for several reasons. First, it demonstrates the growing willingness of stablecoin issuers to take proactive steps against illicit activity, a stance that aligns with increasing regulatory scrutiny worldwide.
Regulators in the United States, Europe, and Asia have been urging stablecoin providers to adopt stronger anti‑money‑laundering (AML) controls, and the move by Circle and Tether can be seen as a concrete example of industry self‑regulation. Second, the action highlights the technical capabilities that these issuers have built into their token contracts. Both USDC and USDT are issued on multiple blockchains, including Ethereum, Solana, and Tron, and each version includes built‑in compliance mechanisms that allow the issuers to freeze or blacklist addresses in response to verified wrongdoing. Despite the successful freeze of the USDC and USDT, the majority of the stolen assets remain beyond the reach of Circle and Tether.
Ether, the native token of the Ethereum network, is not directly controlled by any single entity, and its decentralized nature means that even if a wallet is identified, there is no straightforward way to lock the funds. The attackers have likely dispersed the ether across numerous addresses, using mixers and other privacy‑enhancing tools to obscure the trail. This underscores a broader challenge in the crypto space: while stablecoin issuers can intervene in the tokens they control, the broader ecosystem of decentralized assets remains largely resistant to such interventions. Industry experts note that the freezing of the stablecoin wallet may still have a substantial impact on the overall value recovered from the hack.
Stablecoins constitute a significant portion of the total stolen amount, and by immobilising roughly $318,000 worth of USDC and USDT, Circle and Tether have prevented the hackers from converting these assets into fiat currency or using them to purchase other cryptocurrencies. This, in turn, could reduce the overall profitability of the heist and may deter similar attacks in the future, as perpetrators recognize that not all assets can be freely moved once they enter the stablecoin ecosystem. The Bitget hack also raises important questions about the security practices of centralized exchanges.
While exchanges provide valuable services such as liquidity, custodial storage, and user-friendly interfaces, they also become attractive targets for sophisticated cyber‑criminals. In response to the breach, Bitget has pledged to reimburse affected users and is working with law‑enforcement agencies and blockchain forensic firms to trace the stolen funds.
The exchange has also announced a series of security upgrades, including enhanced multi‑signature controls, stricter withdrawal limits, and more rigorous monitoring of hot wallet activity. From a broader perspective, the incident illustrates the evolving dynamics between decentralized finance (DeFi) and traditional financial oversight.
As stablecoins bridge the gap between crypto and fiat, issuers find themselves in a unique position where they must balance the open, permissionless ethos of blockchain with the obligations imposed by regulators and the expectations of users for a safe, trustworthy environment. The collaborative freeze by Circle and Tether serves as a precedent for future joint actions, suggesting that stablecoin issuers may increasingly coordinate their compliance efforts to combat illicit activity.
In conclusion, the coordinated effort by Circle and Tether to blacklist a wallet holding approximately $318,000 in USDC and USDT marks a noteworthy development in the ongoing battle against cryptocurrency theft. While the majority of the stolen assets remain locked in ether—a token that resists direct intervention—the immobilisation of the stablecoins represents a tangible step toward mitigating the financial damage inflicted by the Bitget hack. The incident also serves as a reminder of the importance of robust security measures for exchanges and the growing responsibility of stablecoin issuers to act as custodians of compliance in an increasingly regulated digital asset landscape.