An investigation by FlashRescue, co-founded by investigator Darcy, has revealed significant operational flaws in Tether's fund-freezing protocol. Analysis of 2,955 freeze events on Ethereum and TRON shows an average delay of 2 hours, 16 minutes, and 15 seconds between the submission of a lock proposal and its blockchain execution. This lag allows monitored actors to drain flagged wallets before the freeze takes effect.
Records indicate that a group of 60 addresses began moving funds just 14 minutes after the formal proposal, successfully emptying 20.4 million USDT. An additional 113 suspicious wallets completed partial transfers totaling approximately 35.5 million USDT before being frozen. The issue was starkly illustrated in July 2026, when OFAC sanctioned four TRON wallets linked to Iran’s central bank holding over $165 million in stablecoins—$131 million was eventually frozen by Tether, but roughly $34 million had already exited the system due to the delay.
The technical lag stems from Tether's multi-signature scheme required for each administrative transaction. FlashRescue’s data shows high-risk actors monitor smart contract activity and trigger fast-execution withdrawals. In contrast, USDC issuer Circle only intervenes upon court or law enforcement requests, a policy criticized—investigator ZachXBT noted that Circle’s inaction since 2022 allowed the movement of approximately $420 million in illicit funds.
Tether maintains that its strategy prioritizes coordination with over 340 agencies across 65 countries, immobilizing over $4.4 billion in assets. However, limitations become evident when stolen funds enter liquidity pools: once illicit balances mix with clean capital, recovery prospects drop sharply, as seen in the August 4, 2026 Gate exchange incident. Independent analysts plan to release comparative studies on confirmation times through Q3 2026.
