Four Tron Wallets Just Lost Access to $131 Million in USDT
• July 15, 2026 1:11 pm • CommentsFour wallets on Tron are still visible to anyone with a block explorer. Their owners may still possess the private keys.
But the $131 million in USDT sitting there can no longer move.
That is the sharp edge of a centrally issued stablecoin.
The U.S. Treasury sanctioned the addresses after linking them to Iran’s central bank and military apparatus. Tether then used the controls built into USDT to freeze the balances, turning an onchain asset into inaccessible money without taking possession of the wallets themselves.
Decrypt reported that more than $131 million was frozen across four Tron addresses tied to the Central Bank of Iran and Iran’s armed forces. The action followed sanctions from the Treasury Department’s Office of Foreign Assets Control, better known as OFAC.
The distinction between sanctioning and seizing matters. Treasury did not announce that agents had obtained a seed phrase, moved the tokens into a government wallet or taken control of the accounts.
The addresses remain on Tron and the balances remain observable.
Tether’s freeze prevents the affected USDT from being transferred through the token contract. The wallet holders can sign transactions with their keys, but the issuer’s blacklist makes those signatures useless for moving the restricted tokens.
Onchain analysts cited in the report also traced earlier activity involving centralized services, including DTC Pay and Bitso. Those links matter because centralized exchanges and payment companies create identification and compliance points around money that otherwise moves through public addresses.
The result is a highly visible lock. The funds were not hidden inside a bank ledger, and the freeze did not make them disappear.
Anyone can watch the addresses, while the owners watch balances they cannot spend.
.@USTreasury is committed to disrupting and degrading Iran’s illicit financial activities, including its abuse of digital assets. Today, Treasury’s Office of Foreign Assets Control sanctioned multiple wallets tied to the Central Bank of Iran, resulting in the freeze of over $130…
— Treasury Secretary Scott Bessent (@SecScottBessent) July 14, 2026
Treasury Secretary Scott Bessent put the total at more than $130 million and said the wallets were tied to Iran’s central bank. His statement framed the action as an effort to deny the Iranian government access to proceeds from illicit revenue schemes.
For the stablecoin market, the episode exposes a trade that often gets blurred by the word “crypto.” USDT travels on public blockchains and can settle globally in minutes, yet it remains a liability issued by a company with the technical ability to block specific addresses.
That ability is one reason USDT can maintain relationships with banks, exchanges and law enforcement. It is also why holding USDT is not the same thing as holding a censorship-resistant native asset such as Bitcoin.
Chainalysis estimated that Iran’s crypto ecosystem exceeded $7.78 billion in 2025. The firm found that addresses associated with the Islamic Revolutionary Guard Corps represented more than half of the value received across that ecosystem during the fourth quarter.
IRGC-associated addresses received more than $3 billion during 2025, up from more than $2 billion in 2024. Chainalysis calls those figures a lower bound because they cover addresses publicly connected to sanctions designations, not every shell company, facilitator or undiscovered wallet that may be operating on behalf of the organization.
That scale explains why a four-wallet freeze can be both large and incomplete. Blocking $131 million can disrupt a meaningful pool of liquid dollar tokens without dismantling the wider network that moves value through exchanges, bridges, intermediaries and newly created addresses.
The same research makes an equally important distinction: Iranian crypto use is not synonymous with regime finance. Chainalysis observed ordinary Iranians moving more Bitcoin into personal wallets during protests and economic instability as the rial collapsed and inflation eroded savings.
One side of Iran’s onchain economy is a sanctions target. Another is made up of people trying to protect what remains of their money.
Treating those two groups as one would miss what the ledger is actually showing.
The wallet is linked OFAC sanctioned ISLAMIC REVOLUTIONARY GUARD CORPS (IRGC)- CENTRAL BANK OF THE ISLAMIC REPUBLIC OF IRAN (BANK MARKAZI JOMHOURI ISLAMI IRAN) pic.twitter.com/f0wlcHrYDR
— Specter (@SpecterAnalyst) July 14, 2026
The wallets are only the last visible stop in a much larger map.
TRM Labs traced more than $3.84 billion in flows between the global exchange CoinEx and sanctioned Iranian entities over more than seven years. Of that total, roughly $2.7 billion moved between CoinEx and Nobitex, Iran’s largest domestic crypto exchange, across about 6.2 million transfers.
TRM found direct CoinEx exposure to more than 60 Iranian crypto entities. Major domestic exchanges repeatedly routed a similar share of their volume through CoinEx, while Nobitex made CoinEx its largest named external counterparty by a wide margin.
The most relevant trail began with the Central Bank of Iran. TRM says about $67 million originating from the bank reached CoinEx addresses between June 2025 and June 2026 through a deliberately layered, multi-chain route.
Large deposits arrived as USDT on Tron, were divided into smaller amounts and crossed to Ethereum. The funds then entered multisignature contracts, were converted into Aave protocol tokens, fragmented again and eventually reconsolidated toward centralized exchange off-ramps.
That route explains both the attraction and the weakness of stablecoins for sanctions evasion. Tron makes dollar tokens cheap and quick to move.
Bridges and DeFi protocols create more layers. But every public hop leaves evidence, and the USDT at the center still answers to an issuer capable of freezing it.
The cat-and-mouse game will not stop with these four addresses. Operators can move earlier, change chains, use different assets or break transfers into smaller pieces.
Investigators can cluster related addresses, follow exchange deposits and ask issuers or custodial platforms to intervene.
Tether has made that intervention a central part of its defense of USDT. In April, the company disclosed a separate freeze of more than $344 million across two addresses in coordination with OFAC and U.S. law enforcement.
The issuer says it has worked with more than 340 agencies in 65 countries across over 2,300 cases. It puts the total value frozen through those efforts above $4.4 billion, including more than $2.1 billion connected to U.S. authorities.
Those are company figures, but they reveal the scale of the policy. Tether is not treating address freezes as an exceptional capability reserved for one dramatic case.
It is operating USDT as a dollar network with an active enforcement layer.
Tether argues that this makes public stablecoins easier to trace and restrict than cash moving through opaque channels. Critics see the same capability and reach the opposite conclusion: a token advertised as onchain money can still be stopped by a private issuer responding to state power.
Both statements can be true.
USDT gives traders a liquid digital dollar that can cross borders without waiting for a bank wire. It also carries issuer risk, blacklist risk and the legal reach of the jurisdictions surrounding Tether and its partners.
The four Tron wallets make that bargain impossible to ignore. The balances are public.
The keys may still work. The money does not.
Join the conversation!
We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.
