Key Takeaways:
- Tether froze 72.03M USDT after ZachXBT traced 120.2M in suspect flows
- Roughly $48M moved before the freeze via exchanges, bridges, and XMR buys
- Monero surged from $330 to as high as $438 on conversion pressure
Back
Tether freezes $72M USDT as ZachXBT traces laundering to Monero
Tether froze 72.03 million USDT on Tron after blockchain investigator ZachXBT traced 120.2 million in suspect flows that routed funds into Monero, centralized exchange deposits, and cross-chain bridges.
"The address received 120.2 million USDT on June 11 and began splitting funds across multiple routes before Tether blacklisted a related address," ZachXBT said in a post mirrored by a USDT ban-list monitor.
Roughly $48 million moved before the freeze, according to reports. The funds went to KuCoin deposit addresses, instant exchanges, and cross-chain bridges via Near Intents, with a portion converted into Monero. The buying pressure pushed XMR from about $330 to a range of $420 to $438, according to on-chain investigator reports.
The episode highlights a structural limit of stablecoin issuer controls: address-level freeze power applies only while value remains in a token that can be blacklisted. Once funds move into privacy coins, exchange deposits, or bridged assets, the response shifts from direct token control to venue cooperation and off-chain investigation.
The laundering route
The public trail begins with a Tron address that received 120.2 million USDT on June 11. From there, the operator sent more than $12 million to KuCoin deposit addresses, moved about $8 million to instant exchanges, bridged more than $8 million from Tron to Bitcoin and Ethereum through Near Intents, and created Monero orders large enough to move the market.
XMR's 24-hour volume stood at about $319 million on June 12, according to CryptoSlate market data. The roughly $48 million that moved before the freeze would equal about 15 percent of that daily volume, though the comparison is not a precise execution map because the funds were split across several routes.
No specific hack has been publicly tied to the wallet, and the original source of the 120.2 million USDT remains unresolved. The flow should be treated as a suspected laundering pattern rather than a confirmed attribution to a known exploit or sanctions actor, investigators said.
What Tether could still stop
USDT is a dollar stablecoin issued by a centralized company across multiple blockchains, including Tron. A stablecoin issuer can blacklist specific token addresses and prevent tokens at those addresses from being transferred. In an April statement about a separate $344 million freeze, Tether said it can restrict assets when wallets are tied to sanctions evasion or criminal networks, and that it works with more than 340 law enforcement agencies across 65 countries.
The freeze appears to have caught the portion still within the controllable USDT layer. The roughly $48 million that moved first is the harder part of the story — its recovery depends on exchange compliance requests, cross-chain tracing, and whatever traceability remains after the conversion into Monero.
Monero's design, which uses RingCT, stealth addresses, and ring signatures to obscure sender, recipient, and amount data on-chain, makes public tracing much harder after a conversion. The price impact in XMR showed what may already have left the stablecoin issuer's control layer.
The next signals are practical: Tether could confirm the specific freeze or explain the basis for blacklisting. Exchanges and swap services could identify downstream deposits. XMR liquidity could show whether the conversion pressure has been absorbed.
This article is for informational purposes only and does not constitute investment advice.
