Reported Tether freeze of approximately 10 million USDT linked to CryptoBilis wallet thefts

Bitquery's blockchain analysis reports that Tether blacklisted 37 TRON addresses linked to the October 2026 CryptoBilis-associated hardware-wallet drain, including 20 addresses holding approximately 10 million USDT. The restrictions were reported on October 9, and Bitquery says four temporarily blacklisted addresses later identified as THORChain vaults were unblocked. These are externally reported issuer-control actions; SOG does not equate freezing balances with returning funds to victims.

Date: 2026-10-09
Affected records: 2 linked records
1 stablecoin · 1 organization
Evidence: 3 sources
3 evidence relations

Connected records

Affected records

Assets and organizations connected to this event.

StablecoinTether USDt OrganizationTether

Sources

Evidence

Sources used for this record, with archival copies where available.

3 source identities · 3 evidence relations
Source	Publisher and date	Relevance	Archive
Ledger CryptoBilis Hack: $102.0M Drained, Where It Went — on-chain freeze investigation Source details Source category Research or security report Provenance Independent third-party source Primary or secondary Secondary source Reliability High	Bitquery Investigations Published 2026-10-09	Onchain Analyst Report, Reported Frozen Amount, Issuer Control Scope	No archive recorded
Ledger claims CryptoBilis cases are limited as up to $93M is traced, $10M frozen Source details Source category Independent news or analysis Provenance Independent third-party source Primary or secondary Secondary source Reliability Medium	CoinDesk Published 2026-10-12	Secondary Freeze Report, Reported Frozen Amount, Issuer Control Scope	No archive recorded
Ledger Says All Confirmed Cases Trace to Reseller CryptoBilis, Gives No Loss Total Source details Source category Independent news or analysis Provenance Independent third-party source Primary or secondary Secondary source Reliability Medium	Unchained Published 2026-10-12	Secondary Freeze Report, Reported Frozen Amount, Issuer Control Scope	No archive recorded

Research or security report

Ledger CryptoBilis Hack: $102.0M Drained, Where It Went — on-chain freeze investigation

High

Publisher: Bitquery Investigations
Published: 2026-10-09
Provenance: Independent third-party source
Primary or secondary: Secondary source
Supported claims: Onchain Analyst Report, Reported Frozen Amount, Issuer Control Scope
Archive: No archive recorded
Reliability: High

Independent news or analysis

Ledger claims CryptoBilis cases are limited as up to $93M is traced, $10M frozen

Medium

Publisher: CoinDesk
Published: 2026-10-12
Provenance: Independent third-party source
Primary or secondary: Secondary source
Supported claims: Secondary Freeze Report, Reported Frozen Amount, Issuer Control Scope
Archive: No archive recorded
Reliability: Medium

Independent news or analysis

Ledger Says All Confirmed Cases Trace to Reseller CryptoBilis, Gives No Loss Total

Medium

Publisher: Unchained
Published: 2026-10-12
Provenance: Independent third-party source
Primary or secondary: Secondary source
Supported claims: Secondary Freeze Report, Reported Frozen Amount, Issuer Control Scope
Archive: No archive recorded
Reliability: Medium

Record details
Classification, review, and event-specific data

Record ID: sog_ev_usdt_2026_10_09_cryptobilis_blacklist
Severity: High
Event type: Issuer Freeze
Public category: Issuer control action
Lifecycle effect: No lifecycle change
Recovery or reversal: Not applicable
Recovery date: Not yet recorded
Cause or mechanism: Not yet verified
Structured detail kind: Issuer Control
Record confidence: Medium
Evidence relations: 3

Event-specific details

Issuer control

Control action: Address Blacklisting
Related category: Issuer Control
Deployment record: sog_dep_usdt_tron
Network: TRON
Token standard: TRC-20
Affected addresses: Not yet recorded
Blacklist transaction: Not yet recorded
Related transactions: Not yet recorded
Reported restricted amount: Approximately 10 million USDT across 20 addresses (Bitquery estimate) (approximate)
Trigger: Suspected Illicit Activity
Legal basis: Unknown after review
Requesting authority: Unknown after review
Source incident: October 9, 2026 CryptoBilis-associated Ledger hardware-wallet drain reports
Status effect: No recorded change
Market-status effect: None Confirmed
Reserve effect: None Known
Redemption effect: None Known
Depeg effect: None Known
Verification status: Onchain Details Pending
Summary: Bitquery attributes 37 TRON USDT blacklist actions to Tether on October 9, with about 10 million USDT immobilized at 20 funded addresses. Four temporary blacklists were reportedly lifted later the same day. Exact blocklist transactions and addresses remain unverified by SOG; restrictions are not returned funds or issuer-wide distress.

Maintenance

Corrections and further reading

Use the documented correction path and methodology.