USDT (Tether)
USDT (Tether) is the world's most traded cryptocurrency and the dominant stablecoin, pegged 1:1 to the US dollar. It exists on multiple blockchains — Tron (TRC-20), Ethereum (ERC-20), BNB Chain, Solana, and others. Because USDT has instant real-world value and high liquidity, it is the most-stolen asset in crypto. It is also the only major crypto where the issuer (Tether Limited) can freeze specific addresses at the smart contract level.
What USDT Is and How the Peg Works
Tether Limited launched USDT in 2014, originally on the Bitcoin blockchain via the Omni Layer. Today most USDT circulates on Tron (TRC-20) and Ethereum (ERC-20). Each USDT token is supposed to be backed by one US dollar (or equivalent assets) held in reserve by Tether Limited. The company publishes quarterly attestation reports, though these fall short of a full independent audit and remain a subject of scrutiny in the industry.
When you hold USDT, you are not holding USD — you are holding a liability of Tether Limited. The peg is maintained because Tether promises to redeem tokens for USD, and because arbitrageurs correct any deviation on secondary markets. In practice the peg has held extremely close to $1.00 since 2017, even through major market crashes.
TRC-20 vs ERC-20: The Practical Difference
The network a USDT token lives on determines its transaction cost and speed — not its value, which is always $1.00 regardless:
- TRC-20 (Tron). Near-instant finality (~3 seconds), transaction fees of fractions of a cent. This makes TRC-20 the dominant format for exchange-to-exchange transfers, P2P payments, and remittances in CIS and Southeast Asia. It is also the most common format stolen in fraud — precisely because of its speed and low cost.
- ERC-20 (Ethereum). More expensive (gas fees can range from cents to dollars depending on network congestion) but deeply integrated with the DeFi ecosystem. Most DEXs, lending protocols, and yield farming platforms use ERC-20 USDT.
- Other networks. USDT also runs on BNB Chain (BEP-20), Solana (SPL), Polygon, Avalanche, and Arbitrum. Each is a distinct token that cannot be directly transferred between networks without a bridge.
A common mistake by victims of theft: assuming that tracing USDT stolen via TRC-20 is impossible because of the cheap transfers. On the contrary — every Tron transaction is permanently recorded on the Tron blockchain, fully traceable by address. The speed is what creates urgency, not obscurity.
Why USDT Is the Most Targeted Asset in Crypto Theft
USDT has three properties that make it uniquely attractive to attackers. First, immediate liquidity: unlike BTC or ETH, stolen USDT doesn't need to be swapped — it's already denominated in dollars. Second, low traceability effort: while all transactions are on-chain, USDT can be split and passed through dozens of wallets in minutes via TRC-20 at near-zero cost. Third, exchange integration: every major and minor exchange accepts TRC-20 USDT deposits, making it easy to deposit stolen funds for rapid withdrawal as local currency via P2P.
In our case work, USDT accounts for over 70% of the value stolen across fraud schemes, phishing attacks, exchange hacks, and investment scams. This mirrors global blockchain analytics data — Chainalysis consistently identifies USDT as the leading asset in illicit transaction volume.
Tether's Freeze Mechanism: How It Works for Victims
The USDT smart contract on every chain includes a blacklist function controlled by Tether Limited. When an address is blacklisted, all USDT at that address becomes permanently frozen — it cannot be transferred by anyone, including the address owner. This is a centralized control mechanism that distinguishes USDT from truly decentralized assets like BTC or ETH.
Tether cooperates with law enforcement and documented theft victims. The process: you must provide (1) the destination address where stolen USDT landed, (2) the transaction hash proving the theft, and (3) ideally a police report or legal proceeding. Tether's response time varies — from hours to weeks. Exchanges that receive stolen USDT often freeze the account before Tether acts, if you report quickly.
Critical timing: once an attacker moves USDT through enough intermediate wallets or converts it on an exchange, the window for a Tether freeze narrows dramatically. In our experience, freeze requests submitted within 2–4 hours of the theft have significantly higher success rates than those submitted days later.
What happens after a blacklist: the USDT tokens at the frozen address are permanently immobilized. In law enforcement cases where ownership is established, Tether can work with courts to redirect frozen funds. Without legal proceedings, the tokens simply sit frozen indefinitely.
Frequently Asked Questions
What is the difference between TRC-20 and ERC-20 USDT?
TRC-20 USDT runs on Tron — transfers are near-instant and cost fractions of a cent, making it popular for trading and remittances. ERC-20 USDT runs on Ethereum — transfers cost more in gas fees but integrate with the broader DeFi ecosystem. Both are redeemable 1:1 for USD through Tether.
Can Tether freeze stolen USDT?
Yes. Tether Limited has a blacklist function built into the USDT smart contract. When activated, a specific address can no longer transfer its USDT. Tether works with exchanges and law enforcement on documented theft cases. Acting quickly — within hours — is critical to requesting a freeze.
Is USDT safe to hold?
USDT is stable in price but carries counterparty risk: Tether Limited must hold sufficient dollar reserves to back all outstanding tokens. Independent audits are published quarterly but remain a point of debate. For large holdings, diversifying across USDC or DAI reduces single-issuer risk.
Why is USDT stolen more often than BTC or ETH?
USDT is immediately liquid, doesn't need to be converted, and can be moved cheaply via TRC-20. Attackers can take stolen USDT to any exchange supporting TRC-20 deposits and liquidate it immediately. BTC and ETH are trackable and often require OTC brokers for large cash-outs.
What should I do if my USDT was stolen?
Record the receiving wallet address and transaction hash immediately. Contact the exchange where the funds landed and request an emergency freeze with the on-chain evidence. Report to Tether Limited through their law enforcement portal. Contact a blockchain forensics firm within the first few hours — recovery probability drops sharply after that.