Binance hot wallet attacker is getting a masterclass in 2026's on-chain compliance infrastructure.
Frozen assets breakdown:
• $USDT: 1.35B frozen by Tether
• $USDC: 823M frozen by Circle
• RLUSD: 40.5M frozen by Ripple in the same block as attacker's last sale
• $BEAM: 984M burned directly from attacker's wallet
Total locked: ~$2.2B. Zero liquidity.
The attacker swept 200M $USDT at 21:44 into a wallet Tether had already blacklisted. Funds locked on arrival. Attempted 8.4M USDt move on Avalanche reverted. Now bridging AVAX through Circle's CCTP (the same Circle that froze them).
What can't be frozen is being sold in 0.1% slices because every large transfer gets flagged instantly. 345K $ETH and 18.27K $BTC remain untouched in wallets every exchange is monitoring.
On-chain surveillance + issuer coordination closed the loop within an hour. What can be frozen is frozen. What can't be frozen is tracked block-by-block. User funds covered.
Frozen assets breakdown:
• $USDT: 1.35B frozen by Tether
• $USDC: 823M frozen by Circle
• RLUSD: 40.5M frozen by Ripple in the same block as attacker's last sale
• $BEAM: 984M burned directly from attacker's wallet
Total locked: ~$2.2B. Zero liquidity.
The attacker swept 200M $USDT at 21:44 into a wallet Tether had already blacklisted. Funds locked on arrival. Attempted 8.4M USDt move on Avalanche reverted. Now bridging AVAX through Circle's CCTP (the same Circle that froze them).
What can't be frozen is being sold in 0.1% slices because every large transfer gets flagged instantly. 345K $ETH and 18.27K $BTC remain untouched in wallets every exchange is monitoring.
On-chain surveillance + issuer coordination closed the loop within an hour. What can be frozen is frozen. What can't be frozen is tracked block-by-block. User funds covered.