Tether froze 1.45 million USDT in THORChain vaults for three hours and explained nothing: what it means for USDT holders

What happened

THORChain is a protocol that swaps coins between different blockchains without an exchange or an account. The coins of users and liquidity providers sit in vaults that the network's nodes control jointly. On the TRON network there are six such vaults.

The timeline of October 9 was pieced together by a researcher known as Khal and by CryptoSlate:

• 12:09 UTC. In a single TRON block, four of THORChain's six vaults land on the USDT contract's blacklist. They hold about 1.45 million USDT, which is 93% of all the protocol's USDT on TRON.
• Shortly after. THORChain halts trading, transaction signing and liquidity operations on TRON. About $363,000 gets stuck in the payout queue.
• 15:35 UTC. THORChain technical co-founder Chad Barraford reports that the addresses appear to be unfrozen.
• 15:58 UTC. USDT swaps on TRON resume.

The protocol itself was not hacked, and the coins never left the vaults. They simply could not move: the USDT contract rejected every transfer from those addresses.

What the two sides say

Barraford wrote on X that nobody had warned the team: "We don't know why this choice was made and have had no comms with USDT before this action". He added: "We hope that this was made in error / misunderstanding". According to him, THORChain is trying to reach Tether on its own.

Tether has not commented on the freeze. Cointelegraph contacted both companies and got no reply.

The only explanation so far came from Khal: the vaults may have been caught in a wider block that took in about 30 other wallets at the same moment. This is a theory, not a confirmed fact. Why the addresses were put on the list and why they were taken off three hours later was still unknown as of the evening of October 10.

There is also some background worth knowing. The day before the freeze, on October 8, figures came out on THORChain's record September: about $3 million in revenue. The rise in volume coincided with the movement of money linked to the Bitget hack, and the protocol refused to block addresses selectively. Nobody has confirmed a link between this and the freeze.

Why decentralization did not help

THORChain has no director who can press a button. Transaction signing is spread across the nodes, and none of them controls the money alone. But that only answers the question of who can send coins out of a vault.

USDT has a second layer of control, and it belongs to the issuer. A blacklist is built into the token contract: Tether adds an address to it, and the contract stops executing transfers from that address. The owner still holds the keys but cannot do anything with the coins. THORChain's nodes have no power over that list.

That makes two different things:

So "non-custodial" and "unstoppable" are not the same thing. A swap runs without a middleman as long as it involves coins with no issuer: Bitcoin, Ether, Zcash. Once a token with a blacklist appears in the pair, the deal has a third party. We have covered THORChain before, when the protocol opened a native Zcash pool.

This is not the first dispute over freezes

Tether explains its policy this way: the company follows OFAC sanctions lists and applies them not only to its own customers but also to wallets on the secondary market. By its own figures, about $550 million has been frozen over Iran alone in 2026. We explained how the blacklist works and how to check your address in the article Tether froze $550 million of USDT.

But the issuer is being taken to court more and more often:

• This week the payments company Conduit Technology filed a lawsuit in New York: it says Tether wrongfully froze $2.76 million in its treasury wallet.
• In August two Thai citizens sued over a $42.4 million freeze that, they claim, Tether carried out at the "informal request" of a US agency.

The THORChain story adds a new twist. Before, blocks hit wallets that someone had called suspicious. Now the infrastructure ordinary users rely on to swap coins stood still for three hours.

What this means for a USDT holder

There is no reason to panic: the freeze lasted three hours and nobody lost anything. But it is worth drawing some conclusions.

• USDT in someone else's vault depends on that vault's address. If a pool, a bridge or a service lands on the blacklist, your coins stand still along with everyone else's, even if nobody has questions for you.
• Your own wallet removes half the risk. It can be frozen too, but only as a specific address. We explained separately how a custodial wallet differs from a non-custodial one.
• A stablecoin is handy for payments, not for holding forever. Bitcoin has no issuer and no blacklist in its protocol. You can move part of your dollars into a coin with no issuer in a single swap: VertEXchange will send it straight to your address.
• Do not keep everything in one stablecoin. USDC has freezes too, but the decisions are made by a different company under different rules. We compared the two in the guide USDT or USDC.

One more thing. This same week the US Treasury Secretary promised to seize $1 billion of Iranian crypto. The tool for such seizures is the same one that stopped THORChain for three hours.

How to swap USDT TRC20 without registration

VertEXchange needs no account, email or phone number for a swap. You pick a pair, paste your wallet address and see the rate and the amount you will receive before you send anything. The coins go straight to your address: VertEXchange does not hold them.

• The fixed rate holds for about 15 minutes, so the amount will not change while the transfer is being confirmed.
• You can set a refund address: the coins go back there if the swap does not go through.
• The personal fields of an operation are deleted 24 hours after it completes, and your swap history stays only in your browser.
• A support chat is on every page, and questions are resolved by the swap code.

If you want to leave a token that has an issuer, you can swap USDT TRC20 to Ethereum or buy bitcoin with USDT TRC20. And for those who also need privacy, there is the USDT TRC20 to Monero pair.

FAQ

What happened to THORChain on October 9, 2026?

Tether blacklisted four of the protocol's six vaults on the TRON network. About 1.45 million USDT were frozen for roughly three hours, and swaps through TRON stopped for that time.

Was money stolen from THORChain users?

No. There was no hack, and the coins stayed at the vault addresses. Swaps resumed once the addresses were unblocked.

Why did Tether freeze the vaults?

There is no official explanation. The researcher Khal suggested that the addresses were caught in a general block along with about 30 other wallets, but nobody has confirmed this theory.

Can Tether freeze USDT at any address?

Technically yes: the blacklist is built into the token contract. In practice the company blocks specific addresses based on sanctions lists and requests from authorities.

Does a decentralized protocol protect against a freeze?

No. The protocol's nodes decide who signs transfers, but the rules of the token itself are set by the issuer. Coins with no issuer, such as Bitcoin, cannot be frozen this way.

What should you do if your USDT is stuck in a frozen pool?

Wait for the issuer's decision and follow the protocol's own announcements. A user cannot speed up the unblocking, and "helpers" who promise to get the money back for a fee are best avoided.