Tether freezes $72M in USDT after funds routed into Monero

A Tron address that received 120.2 million USDT on June 11 sent funds to several venues before a related address was blacklisted and about 72,030,295.55 USDT was frozen, according to on-chain investigators. The owner of the wallet and the original source of the funds have not been identified, and investigators are treating the activity as suspected laundering rather than a confirmed exploit.

On-chain tracing showed the incoming USDT was split across multiple routes. Roughly $12 million moved to KuCoin deposit addresses, about $8 million went to instant-swap services, and more than $8 million was bridged from Tron toward Bitcoin and Ethereum via cross-chain intents. Large buy orders for Monero were also placed; those orders coincided with a rise in the XMR price from about $330 to a range reported near $420–$438. The Monero purchases were visible through market impact rather than follow-on transaction data on the Monero blockchain.

Based on the 120.2 million received and the 72,030,295.55 USDT listed on the blacklist, roughly $48 million appears to have left the controllable USDT layer before the freeze. Funds that moved to exchanges, instant-swap services, bridges or into Monero now require cooperation from venues, cross-chain tracing, and market-level analysis to follow.

Tether issues USDT across multiple blockchains, including Tron, and can blacklist token addresses to prevent transfers from flagged wallets. The company has previously stated it can restrict assets when wallets are tied to sanctions evasion or criminal networks and that it works with law enforcement. Tether has not publicly confirmed the specific freeze tied to the June 11 Tron inflow reported by on-chain monitors.

The sequence illustrates limits on issuer-level controls: freezes can block transfers while value remains in a traceable token layer, but they cannot directly reverse conversions that already moved into other assets, venues or privacy chains. Exchange deposits can trigger compliance holds, bridges require cross-chain tracing, and privacy-coin conversions obscure on-chain sender and recipient data.

Next steps in the inquiry include any confirmation from Tether, identification of downstream exchange or swap deposits, and further updates from on-chain monitors tracking bridge and Monero flows. Investigators continue to treat the activity as a suspected laundering pattern until the wallet owner and the original source of the funds are identified.