← Back to Delta Incident Archive

VERIFIED SECURITY INCIDENT · DCI-2026-054

Tether blacklists a TRON address holding approximately 300,000 USDT

The TRON USDT contract blacklisted an address holding 300,096.50 USDT. Contract checks confirmed the restriction and balance, but no public source identified the requesting party, case, or address owner.

Incident date2026-07-23 Attack typeIssuer freeze SeverityMedium Involved chainsTRON

Incident overview

The TRON version of USDT supports issuer-controlled blacklisting. A blacklisted address can continue to display its token balance while normal transfers are restricted. The blacklist action alone does not establish that the address belongs to a hacker, Huione, a scam group, or a party in a law-enforcement case.

Incident sequence

  1. The target address held approximately 300,096.50 USDT.
  2. The USDT contract administrator added the address to the blacklist.
  3. An automated monitoring account published the address and balance.
  4. A fresh call to the TRON USDT contract confirmed that isBlackListed(address) remained true and balanceOf(address) remained 300,096.50 USDT.

Fund flow

No transfer to a government or custody wallet occurred. The balance remains at the target address while transfer capability is restricted at the USDT contract layer.

Amount basis

The address balance restricted by the contract is 300,096.50 USDT. This is not automatically a judicial seizure, confiscation, or recovered amount.

Evidence boundary

The evidence confirms an issuer blacklist action only. Tether and law-enforcement authorities had not publicly identified the requesting party, case, or owner of the address.

Current status

At 18:57 Beijing time, the contract still returned a true blacklist state and a balance of 300,096.50 USDT. No case name, enforcement requester, address identity, or final forfeiture status had been published.