Stablecoin issuer Tether reversed a three-hour freeze of THORChain's $1.4 million USDT vaults, while current on-chain data shows other TRON freeze targets can still have minutes or even hours before restrictions take effect.
- Tether blacklisted four THORChain vault addresses on Oct. 9, temporarily stopping the cross-chain protocol's TRON trading and liquidity operations, before removing all four from the blacklist at about 15:30 UTC.
- The roughly $1.4 million held in the vaults remained intact and THORChain resumed TRON trading after the restrictions were removed,
- Separately, The Coinformer reviewed recent Tether freeze records and found its current TRON process still exposes a proposed blacklist action on-chain before the freeze is executed, although the gap is often much shorter than it was historically.
THORChain was back online within hours
THORChain, a decentralized exchange that lets users swap assets directly between blockchains, relies on shared vaults to hold the assets used in those swaps.
Four of its TRON vaults were added to Tether's USDT blacklist on Friday, Oct. 9, immobilizing about $1.4 million and forcing THORChain to stop TRON trading, deposits and transaction signing.
Chad Barraford, THORChain's technical co-founder, said on X that the project hadn't been contacted by Tether beforehand and was trying to understand what had happened.
It appears that USDT has chosen to blacklist THORChain vaults of USDT on the TRON blockchain. This is unprecedented in our industry and raises questions for all DeFi protocols about the safety of this asset.
— Chad Barraford (@CBarraford) October 9, 2026
Tether then quickly removed all four addresses from its blacklist between 15:30:33 and 15:30:39 UTC, without explaining the move.
- The Coinformer reached out to Tether for comments and will update the story if the company responds.
A warning can appear before the freeze
The THORChain episode lasted hours after the blacklist took effect. But Tether's current process has another, less visible period before some freezes take effect.
Tether controls TRON-based USDT through a multi-signature wallet. A blacklist action can first appear as a proposal requiring another approval before the USDT contract actually marks the target address as frozen. Until that final execution, the address can still transfer its USDT.
And that gap remains observable in current data.
BlockSec, a blockchain-security company that tracks Tether's owner wallet and USDT contract, recorded 37 TRON freezes on Oct. 8, the day before the THORChain incident. The shortest proposal-to-execution gap was 57 seconds, while others lasted seven minutes, 32 minutes, 85 minutes and as long as two hours and 22 minutes.
TrustSniffer, a separate on-chain monitoring service, reported on Oct. 9 that it had identified 925 TRON wallets from Tether proposals before their freezes executed since July 14. The median gap was about five minutes.
Some wallets have moved before Tether got the final signature
Recent BlockSec records also show that the window has sometimes been long enough for money to disappear before the freeze landed.
- For instance, on July 25, three TRON freeze proposals initially targeted addresses with roughly $367,000, $197,000 and $197,000 respectively.
- By the time the proposals executed roughly one to two minutes later, the addresses recorded zero USDT frozen.
BlockSec said the balances had moved before execution, describing the cases as examples of the multisig delay window in action.
And the gap hasn't vanished since then. Wednesday's records show Tether still sometimes took more than an hour between submitting a TRON freeze proposal and executing it.