A new security report just dropped a pretty wild finding: about $91 billion worth of USDT on Tron — roughly half its circulating supply — is controlled by a single contract, and it only takes two compromised signing keys to seize control of it.

Blockchain security firm Hacken found the contract has no timelock, no cancellation window, and no way to reverse an unauthorized change once made. Get control of those two keys, and you could mint unlimited USDT, freeze addresses, or reassign contract ownership entirely.

To be clear — there's no evidence any keys have actually been compromised. This is a structural risk finding, not a breach.

What makes it stranger: this came out around the same time Tether's corporate rating got upgraded from D to C, based on a KPMG audit showing reserves exceed liabilities by $6.8B. Meanwhile Hacken's own cybersecurity score for USDT? 3.3 out of 10.

Solvency and security are two different questions. Tether just got a good grade on one and a bad grade on the other — worth remembering before anyone calls this a "clean bill of health."

#Tether #USDT #CryptoSecurity