Circle and Tether froze $318K in stablecoins from a Bitget exploit wallet, but the attacker had already converted most stolen funds to ETH.
Security & Exploits ·
Circle and Tether blacklisted a wallet linked to the Bitget exchange breach, freezing approximately $318,000 in stablecoins from the attacker's address. Circle acted first at 05:00 UTC Friday, locking roughly 99,990 USDC, while Tether followed several hours later by blacklisting the same address and immobilizing about 218,023 USDT. However, the freeze captured only a fraction of the stolen funds, as the attacker had already converted most assets into Ethereum before the issuers could intervene.
The limitations of stablecoin controls became apparent in the aftermath. While Circle and Tether can blacklist addresses at the contract level for their own tokens, no issuer controls Ethereum itself—meaning the approximately 170 ETH held in the frozen wallet remains untouchable. Blockchain trackers show other addresses tied to the exploit still control more than 63,000 ETH beyond regulatory reach, demonstrating how quickly the attacker moved stolen assets into unfreezable form.
The recovery represents a minor recovery against a breach initially pegged at roughly $387 million. Bitget's $464 million protection fund is set to cover losses, and the exchange attributed the compromise to a backend system vulnerability in its wallet infrastructure rather than private-key theft. The incident has revived debate over the centralized control issuers hold over decentralized assets.