Stablecoins: Freeze Powers and Self-Custody Limits
Holding a stablecoin in a personal wallet does not necessarily give sole control over its movement. Circle's EVM contracts, for example, include administrator-controlled transfer restrictions. [Circle contracts, FiatToken features: Blacklist] Self-custody and freedom from issuer controls are different properties.
Four separate questions: who holds the wallet key, who controls the token contract, who can identify the transfers, and who can return funds after an incident.
The issuer can retain transfer controls
Tether's 9 December 2023 policy announcement describes voluntary wallet freezing connected with the US sanctions list, including the secondary market. [Tether, Opening announcement; secondary-market controls] Moving tokens away from an exchange should not be treated as an exemption from the issuer's stated policy.
In letters published on 15 December 2023, Tether described cooperation with the US Department of Justice and Secret Service. [Tether, Published letters: cooperation with US authorities] Read those cooperation statements alongside the freeze policy when assessing issuer control.
Circle's EVM contract documentation, pinned to its 26 June 2026 revision, describes several separate roles:
- Blacklister: blocks listed addresses from sending or receiving tokens. [Circle contracts, FiatToken features: Blacklist]
- Pauser: can pause transfers across the contract. [Circle contracts, FiatToken features: Pausable]
- Proxy owner: can change the implementation that supplies the contract's logic. [Circle contracts, FiatToken features: Upgradable]
- Owner: can replace certain administrative roles. This is not the same role as the proxy owner. [Circle contracts, FiatToken features: Ownable]
Before accepting a token, identify its network and contract from the issuer's own records, then check that contract's controls. Do not use a matching ticker as the only identity check.
Self-custody has a narrower meaning
- Wallet control: distinguish control of a signing key from the contract's transfer rules. Check both before treating an asset as freely transferable.
- Token control: changing the wallet app or signing device does not change the contract governing the balance.
- Other assets: distinguish a restriction in one token contract from control over the whole wallet. Do not infer that every asset at the address is affected.
- Wrapped tokens: a bridge or wrapper adds another system to inspect. Check its own custody and administrator rules rather than assuming the original issuer's controls are the only ones.
Tracing is separate from freezing
Bitquery's 31 October 2026 investigation describes following transfers between wallets in the Binance case. [Bitquery, 01: What happened, Bitquery methodology] For a privacy review, record both the visible transfer trail and any exchange or account records that could link those addresses to a person.
The power to study a transfer is not the power to block it. A researcher can publish a transaction trail without holding an issuer's administrator key. An issuer can block a token without making the original transaction disappear.
Binance: the dated statements and their limits
In its 30 October 2026 update, Binance reported about $6.3 billion lost and a partner-wide total of about $3 billion frozen. [Binance, Opening incident estimate; What We Have Done]
Bitquery's timeline places the main Ethereum drain at 20:24 UTC on 29 October and Tether's first freeze at 21:01 UTC, an interval of 37 minutes. [Bitquery, 03: The night, 29 October UTC timeline; subtraction gives 37 minutes]
A freeze restricts movement. It is not, by itself, a transfer into a victim's custody, a legal seizure or repayment. When reading a recovery report, check which event is being described and whose balance changed. A blocked balance and a returned payment answer different questions.
Checks before holding or accepting a token
Identify the asset. Record the network and contract address from the issuer's own documentation. Distinguish native tokens from bridged copies.
Read the controls. Check freeze, pause and upgrade powers, the roles that exercise them, and the issuer's stated policy. Save the review date, source revision and contract address together so a later change can be checked against the same record.
Plan for interruption. Keep payment records and another settlement method. During an incident, verify recovery instructions through official channels. A request for a wallet seed phrase is not evidence of a legitimate repayment process.