{"id":26958,"date":"2025-05-15T14:16:55","date_gmt":"2025-05-15T14:16:55","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=26958"},"modified":"2025-05-15T14:16:55","modified_gmt":"2025-05-15T14:16:55","slug":"tether-blacklist-delay-allowed-78m-in-usdt-transfers-report-says","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=26958","title":{"rendered":"Tether blacklist delay allowed $78M in USDT transfers, report says"},"content":{"rendered":"
\n

<\/p>\n<\/p>\n

\"Tether<\/p>\n

A lag in Tether\u2019s wallet blacklisting process allowed over $78 million in illicit funds to be moved before enforcement actions took effect, according to a new report from blockchain compliance firm AMLBot. <\/p>\n

In a May 15 report<\/a>, AMLBot\u2019s onchain investigation team explained that Tether\u2019s address blacklisting becomes effective after a considerable delay from when the process is initiated on Ethereum and Tron.<\/p>\n

\u201cThis delay originates from Tether\u2019s multisignature contract setup on both Tron and Ethereum, transforming what should be an immediate compliance action into a window of opportunity for illicit actors,\u201c the report stated.<\/p>\n

Tether\u2019s blacklisting procedure is a multi-step process with a first transaction effectively warning of the upcoming blacklisting. First, a Tether administrator multisignature transaction submits a pending call to \u201caddBlackList\u201d on the USDT-TRC20 contract.<\/p>\n

This results in a public \u201csubmission\u201d of the target address as a blacklist candidate. This is followed by a second multisignature transaction confirming the submission, resulting in an \u201cAddedBlackList\u201d emission, making the blacklisting effective.<\/p>\n

Related: <\/strong><\/em>Tether, Tron and TRM Labs jointly froze $126M USDT in 2024<\/strong><\/em><\/a><\/p>\n

A warning on incoming blacklisting<\/h2>\n

In one example shared with Cointelegraph, an onchain transaction<\/a> submitting a Tron address as a blacklist candidate took place at 11:10:12 UTC. The second transaction<\/a> that actually enforced the action did not occur until 11:54:51 UTC on the same day, a 44-minute delay. <\/p>\n

In practice, this delay can be treated by owners of USDt about to be blacklisted as a notice to move their assets to avoid them being frozen. The report stated:<\/p>\n

\u201cThis delay between a freeze request and its on-chain execution creates a critical attack window, allowing malicious actors to front-run enforcement and move or launder funds before the freeze takes effect.\u201c<\/p><\/blockquote>\n

\"Tether
Example of USDt blacklisting transactions. Source: AMLBot<\/em><\/figcaption><\/figure>\n

The report claimed that \u201cfor blockchain-savvy attackers, these delays are golden.\u201d By tracking Tether\u2019s calls in real time, a fraudster can be instantly alerted that their address is being targeted. When asked by Cointelegraph whether the delay is a technical limitation or just a delay in the actions of a multisignature wallet key holder, AMLBot researchers said that they cannot determine it without knowledge of Tether\u2019s internal procedures.<\/p>\n

Tether had not responded to Cointelegraph\u2019s request for comment by publication.<\/p>\n

Related: <\/strong><\/em>Tether stablecoin issuer and Tron launch financial crime unit<\/strong><\/em><\/a><\/p>\n

Not just theoretical<\/h2>\n

AMLBot claimed that its data shows that over $28.5 million in USDT was withdrawn during the delay between the two transactions on the Ethereum blockchain. This amount of freeze avoidance occurred between Nov. 28, 2017, and May 12, 2025. The average amount moved during the delay exceeded $365,000.<\/p>\n

Similarly, $49.6 million was reportedly withdrawn during freeze delay windows on the Tron blockchain, resulting in a total on Ethereum and Tron of $78.1 million. Exploiting this delay on Tron is not particularly rare, according to AMLBot:<\/p>\n

\u201c170 out of 3,480 wallets (4.88%) on Tron blockchain exploited the lag before getting blacklisted. Each of these wallets made 2\u20133 transfers during the delay, withdrawing: Average: $291,970.\u201c<\/p><\/blockquote>\n

Tether has previously promoted its ability to freeze assets as a compliance feature. In 2024, Tether, Tron, and analytics firm TRM Labs cooperated to freeze over $126 million<\/a> in USDT linked to illicit activity.<\/p>\n

Still, the AMLBot report raises questions about the effectiveness and speed of those enforcement actions.<\/p>\n

Magazine: <\/strong><\/em>Chinese Tether laundromat, Bhutan enjoys recent Bitcoin boost: Asia Express<\/strong><\/em><\/a><\/p>\n