Tether froze 1.45 million USDT in THORChain vaults, then reversed course three hours later

Tether froze 1.45 million USDT in THORChain vaults, then reversed course three hours later

The brief blacklisting halted THORChain's Tron-based swaps and reopened the debate over how decentralized DeFi really is

On October 9, 2026, Tether blacklisted four THORChain vault addresses on the Tron network. The move froze approximately 1.45 million USDT and knocked the protocol’s Tron operations offline.

About three hours later, the blacklist was gone. THORChain got its funds back, its swaps restarted.

What happened on Tron

THORChain is a protocol built for cross-chain swaps. It lets users trade assets across different blockchains without handing custody to a centralized exchange.

To pull that off, it keeps pools of assets in vaults on each supported network. Tron is one of those networks, and THORChain ran six vaults there.

Tether’s blacklist hit four of those six. Those four vaults held 93% of THORChain’s assets on Tron.

With the USDT locked in place, the protocol had to pause its Tron-based cross-chain swaps. Liquidity-provider operations on the network were halted too.

THORChain co-founder Chad Barraford said the team received no prior warning from Tether before the freeze.

Advertisement

The blacklist was lifted at 15:30 UTC the same day. Balances came back intact, and THORChain resumed trading and deposits soon after.

No hacks or thefts were reported on THORChain during the episode.

Following the incident, 19 other wallets remained blacklisted.

How Tether’s off switch works

USDT is a token issued by a single company. That company built a blacklist function into the token, which lets it freeze USDT sitting at a given address.

Tether has used this function more than 11,000 times over its history, immobilizing billions in assets.

Usually, those freezes target wallets tied to scams, hacks, or sanctioned actors. This time, the target was a decentralized protocol’s operating infrastructure.

THORChain’s total liquidity across all assets sits at approximately $47.9 million, so a freeze touching approximately 1.45 million USDT is meaningful but far from existential.

The backdrop: hacks, lawsuits, and neutrality

THORChain had recently decided not to block addresses linked to a $387.5 million Bitget hack.

No established connection exists between that decision and Tether’s freeze.

A lawsuit coinciding with the incident alleges Tether improperly froze $2.76 million.

What this means for DeFi and liquidity providers

The most direct lesson lands on liquidity providers. Anyone supplying USDT to a protocol is also taking on issuer risk, meaning exposure to the decisions of one company, not just smart contract or market risk.

Concentrating 93% of a network’s assets in four vaults is efficient, but it also means a single blacklist action can take out nearly everything at once.

Barraford’s account that the team got no prior warning suggests protocols currently have no reliable channel to contest or even anticipate a freeze before it happens.

The pending lawsuit over the $2.76 million freeze could become a test of whether Tether faces any legal limits on how it uses that power.

What to watch next: whether Tether offers any public explanation for the freeze and reversal, what happens with the 19 wallets that stayed blacklisted, and whether THORChain changes how it holds stablecoin liquidity on Tron.

Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.
Tether froze 1.45 million USDT in THORChain vaults, then reversed course three hours later
Tether froze 1.45 million USDT in THORChain vaults, then reversed course three hours later

The brief blacklisting halted THORChain's Tron-based swaps and reopened the debate over how decentralized DeFi really is

On October 9, 2026, Tether blacklisted four THORChain vault addresses on the Tron network. The move froze approximately 1.45 million USDT and knocked the protocol’s Tron operations offline.

About three hours later, the blacklist was gone. THORChain got its funds back, its swaps restarted.

What happened on Tron

THORChain is a protocol built for cross-chain swaps. It lets users trade assets across different blockchains without handing custody to a centralized exchange.

To pull that off, it keeps pools of assets in vaults on each supported network. Tron is one of those networks, and THORChain ran six vaults there.

Tether’s blacklist hit four of those six. Those four vaults held 93% of THORChain’s assets on Tron.

With the USDT locked in place, the protocol had to pause its Tron-based cross-chain swaps. Liquidity-provider operations on the network were halted too.

THORChain co-founder Chad Barraford said the team received no prior warning from Tether before the freeze.

Advertisement

The blacklist was lifted at 15:30 UTC the same day. Balances came back intact, and THORChain resumed trading and deposits soon after.

No hacks or thefts were reported on THORChain during the episode.

Following the incident, 19 other wallets remained blacklisted.

How Tether’s off switch works

USDT is a token issued by a single company. That company built a blacklist function into the token, which lets it freeze USDT sitting at a given address.

Tether has used this function more than 11,000 times over its history, immobilizing billions in assets.

Usually, those freezes target wallets tied to scams, hacks, or sanctioned actors. This time, the target was a decentralized protocol’s operating infrastructure.

THORChain’s total liquidity across all assets sits at approximately $47.9 million, so a freeze touching approximately 1.45 million USDT is meaningful but far from existential.

The backdrop: hacks, lawsuits, and neutrality

THORChain had recently decided not to block addresses linked to a $387.5 million Bitget hack.

No established connection exists between that decision and Tether’s freeze.

A lawsuit coinciding with the incident alleges Tether improperly froze $2.76 million.

What this means for DeFi and liquidity providers

The most direct lesson lands on liquidity providers. Anyone supplying USDT to a protocol is also taking on issuer risk, meaning exposure to the decisions of one company, not just smart contract or market risk.

Concentrating 93% of a network’s assets in four vaults is efficient, but it also means a single blacklist action can take out nearly everything at once.

Barraford’s account that the team got no prior warning suggests protocols currently have no reliable channel to contest or even anticipate a freeze before it happens.

The pending lawsuit over the $2.76 million freeze could become a test of whether Tether faces any legal limits on how it uses that power.

What to watch next: whether Tether offers any public explanation for the freeze and reversal, what happens with the 19 wallets that stayed blacklisted, and whether THORChain changes how it holds stablecoin liquidity on Tron.

Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.