Stablecoin Blacklisting: How OFAC Sanctions and Freeze Functions Work On-Chain

Every major fiat-backed stablecoin in circulation today contains code that allows a centralized party to freeze your tokens. This is not a theoretical concern: Tether has blacklisted over 7,200 addresses holding more than $3.29 billion in USDT across Ethereum and Tron between 2023 and 2025. Circle has frozen roughly $110 million across fewer than 500 USDC addresses. These numbers are growing.

Understanding stablecoin blacklisting mechanics is essential for anyone holding, building with, or accepting stablecoins. This article examines how freeze functions work at the smart contract level, who triggers them, what legal processes are involved, and what options a blacklisted user actually has.

How Freeze Functions Work in Smart Contracts

Both USDT and USDC implement blacklist functionality directly in their ERC-20 token contracts. The mechanism is straightforward: a privileged address maintained by the issuer can add any wallet to an on-chain mapping. Once an address appears in that mapping, the token's transfer and transferFrom functions revert, making the tokens immovable.

The tokens remain visible in the wallet. Block explorers still show the balance. But no transaction involving that address will succeed. The blacklisted user cannot send, receive, mint, or redeem.

USDC: Role-Based Blacklisting

Circle's USDC contract uses a dedicated Blacklistable.sol module with a role-based access pattern. A designated "blacklister" address (separate from the contract owner) can call blacklist(address) to add an address and unBlacklist(address) to remove one. The contract enforces this through a notBlacklisted modifier applied to transfer functions: any call involving a blacklisted address reverts with "Blacklistable: account is blacklisted".

This design separates concerns: the contract owner manages upgrades, while the blacklister handles compliance actions. The separation means compromising one key does not grant both capabilities. However, both roles are ultimately controlled by Circle.

USDT: Blacklist Plus Destroy

Tether's USDT contract includes three privileged functions: addBlackList(address), removeBlackList(address), and destroyBlackFunds(address). The first two work similarly to USDC's mechanism. The third is unique to Tether: it sets a blacklisted address's balance to zero and reduces the total token supply accordingly.

This is the nuclear option. When destroyBlackFunds executes, the tokens are permanently burned. They cannot be recovered, even by Tether. In practice, the freezing and destruction are separate steps. Tether first calls addBlackList to immobilize the funds, then later calls destroyBlackFunds when a court order authorizes seizure. In 2025, roughly 55.6% ($698 million) of the $1.26 billion in frozen USDT was subsequently destroyed.

Key distinction: USDC can freeze and unfreeze tokens, but Circle cannot unilaterally destroy them. USDT can be permanently burned by Tether. This means a USDT freeze can escalate to permanent confiscation in a way that USDC freezes cannot, at least at the smart contract level.

The Numbers: Blacklisting at Scale

The scale of stablecoin blacklisting has grown significantly. In 2025 alone, Tether blacklisted 4,163 addresses and froze $1.26 billion across Ethereum and Tron, according to BlockSec research. That works out to roughly $3.4 million frozen every day.

The chain distribution is notable. Among Tether's 2025 blacklisted addresses, 84.2% (3,506 addresses) were on Tron, corresponding to $853 million in frozen funds. Ethereum accounted for 15.8% (657 addresses), but the average frozen amount per Ethereum address was $613,000: roughly 2.5 times the Tron average. This reflects the different user profiles on each chain.

Who Decides: The Legal and Regulatory Process

Stablecoin blacklisting is triggered through several channels, each with different levels of legal formality and transparency.

OFAC Designations

The Office of Foreign Assets Control (OFAC) maintains the Specially Designated Nationals (SDN) list. When OFAC adds a person or entity to this list, all U.S. persons and companies must freeze that party's assets. OFAC has been adding cryptocurrency wallet addresses to the SDN list since 2018, and as of 2025 the list includes over 1,200 crypto addresses across 17 blockchains.

For stablecoin issuers, the process works like this: Treasury coordinates with relevant issuers before publishing a designation, giving them time to execute freezes before the target can react. This coordination is critical because blockchain transactions are public: if a designation appeared on the SDN list before the freeze, the target could move funds in the minutes between announcement and enforcement.

The largest example to date occurred in April 2026, when OFAC designated two cryptocurrency wallets tied to Iran's Central Bank. Tether coordinated with OFAC to freeze approximately $344 million in USDT before the designation was published.

Law Enforcement Requests

Both issuers respond to law enforcement requests, but with different standards. Circle's CEO Jeremy Allaire stated in April 2026 that USDC will not be frozen without a court order. Circle treats its freeze capability as "not discretionary" and requires lawful orders from relevant authorities before acting.

Tether takes a broader approach, freezing addresses in coordination with law enforcement agencies globally, sometimes without the formal court orders that Circle requires. Tether has described its cooperation as voluntary and proactive, working with agencies across multiple jurisdictions.

Voluntary Compliance Actions

Some freezes occur outside of direct government orders. Issuers may blacklist addresses flagged by their own transaction monitoring systems, by chain analysis firms, or through civil court proceedings. In March 2026, Circle froze 16 unrelated USDC business hot wallets due to a sealed U.S. civil lawsuit, disrupting exchanges, casinos, and forex platforms that had no involvement in the underlying case.

Strict liability applies: Under U.S. sanctions law, OFAC enforcement follows a strict liability standard. A stablecoin issuer does not need to know that an address belongs to a sanctioned party to face penalties for failing to freeze it. This creates a strong incentive to over-comply: freezing first and asking questions later.

What Happens to Blacklisted Users

The practical experience of being blacklisted depends on which stablecoin is frozen and the reason for the freeze.

Immediate Effects

Once blacklisted, the address cannot transfer tokens in or out. Any pending DeFi positions, automated strategies, or scheduled payments fail. The tokens still appear in the wallet but cannot be moved, redeemed, or used as collateral. There is no on-chain notification: users discover the freeze when a transaction reverts.

Can You Redeem?

No. Both USDC and USDT redemption requires transferring tokens to the issuer, and the blacklist prevents this. The standard redemption process (sending stablecoins back to the issuer in exchange for dollars) is blocked. The funds are effectively in limbo until the blacklist is lifted or, in USDT's case, until Tether destroys them.

Is There an Appeal Process?

For OFAC designations, there is a formal (if slow) administrative process. Designated parties can petition OFAC for delisting by demonstrating that the designation was based on insufficient evidence or that circumstances have changed. The Tornado Cash case illustrates this path: after a Fifth Circuit ruling in November 2024 found that OFAC overstepped its authority, Treasury lifted the Tornado Cash sanctions in March 2025.

For issuer-initiated freezes, the process is less clear. Circle has unfrozen addresses after review: in the March 2026 incident, five of 16 frozen wallets were eventually restored, including one Goated.com wallet holding 130,966 USDC that was unfrozen within three days after backlash. But there is no publicly documented appeal mechanism. Affected parties generally need to engage legal counsel and navigate the specific court order or law enforcement request that triggered the freeze.

Tether's unfreezing rate is extremely low. Only 3.6% of blacklisted addresses were unfrozen in 2025, and more than half of all frozen USDT was permanently destroyed via destroyBlackFunds.

The Tron Front-Running Vulnerability

On Tron, Tether uses a multisig wallet to execute blacklisting. This creates a two-step process: one signer submits the blacklist request (publicly visible on-chain), then a second signer confirms it, triggering the actual freeze. The gap between these two transactions creates an exploitable window.

An AMLBot report documented that this window averages 44 minutes, during which targeted addresses can still move funds freely. Sophisticated actors monitor the mempool and multisig submissions to front-run enforcement. The report found that over $78 million in illicit USDT was moved during these delay windows in 2025.

Tether has acknowledged the limitation, describing it as "a trade-off for responsible responsiveness to a $100+ billion ecosystem," with improvements in development. On Ethereum, blacklisting executes in a single transaction with no comparable delay.

Comparing Issuer Approaches

Circle and Tether represent two distinct philosophies toward compliance enforcement.

The Drift Protocol exploit in April 2026 starkly illustrated these differences. When a North Korea-linked group drained $285 million from the Solana-based protocol, Circle was criticized for failing to freeze approximately $232 million in stolen USDC for over six hours, even as funds were bridged via Circle's own Cross-Chain Transfer Protocol during U.S. business hours. Circle maintained that freezes require lawful orders, not real-time discretionary action.

The fallout was significant: a class action lawsuit was filed against Circle, and Drift Protocol announced it would switch from USDC to USDT as its settlement stablecoin, securing a $147.5 million recovery package from Tether and partners.

How DeFi Protocols Are Affected

The risk of stablecoin freezing extends beyond individual wallets. Any smart contract holding stablecoins can be blacklisted, and this creates systemic risks for DeFi protocols.

Liquidity Pool Risk

If a stablecoin issuer blacklists a liquidity pool contract address, all stablecoins in that pool become frozen. Liquidity providers cannot withdraw, traders cannot swap, and the pool effectively dies. This is not hypothetical: Circle blacklisted Tornado Cash's USDC pool contract addresses in August 2022 after OFAC sanctioned the mixer, freezing approximately $75,000 in USDC.

Collateral and Lending

Lending protocols that accept USDC or USDT as collateral face the risk that frozen stablecoins can create bad debt. If a borrower's collateral is blacklisted, the protocol cannot liquidate it, leaving lenders exposed. This risk cascades through composable DeFi: a blacklisted address in one protocol can affect positions in protocols that build on top of it.

Protocol Design Responses

Some protocols have adapted their architecture in response. MakerDAO (now Sky) diversified its collateral away from heavy USDC dependency after the Tornado Cash incident raised concerns about single-issuer risk. Algorithmic stablecoins and crypto-collateralized designs like DAI and LUSD avoid this problem entirely, since they have no centralized issuer with freeze capabilities. The tradeoff is that these designs introduce different risks: depeg risk, liquidation cascades, and lower capital efficiency.

The GENIUS Act: Codifying Freeze Requirements

The GENIUS Act, signed into U.S. law in 2025, formalizes freeze capabilities as a legal requirement for permitted payment stablecoin issuers. The law mandates that issuers maintain "technical capabilities, policies, and procedures to block, freeze, and reject specific or impermissible transactions that violate Federal or State laws, rules, or regulations."

This obligation extends beyond an issuer's own customers and accounts to secondary market activity. In practice, this means any stablecoin that achieves regulatory approval under the GENIUS Act must have blacklisting capabilities baked into its smart contract. A compliant stablecoin without a freeze function is a contradiction under U.S. law.

In April 2026, FinCEN and OFAC jointly issued proposed rules for implementing these requirements, with final regulations due by July 2026. The rules define "burn" as "permanently removing payment stablecoins from circulation" and specify that issuers must respond to seizure warrants within mandated timeframes.

The EU's MiCA framework imposes similar requirements, mandating that e-money token issuers comply with sanctions enforcement and maintain the technical ability to freeze tokens when required by competent authorities.

The Philosophical Tension

Stablecoin blacklisting exposes a fundamental tension at the heart of digital assets. The promise of programmable money on public blockchains is that value can move without intermediary permission. The reality of fiat-backed stablecoins is that an issuer can unilaterally prevent any transaction at any time.

This is not a bug: it is a design choice driven by regulatory reality. Operating within the traditional financial system requires compliance with KYC/AML and sanctions laws. Stablecoin issuers that cannot freeze addresses cannot obtain banking relationships, money transmitter licenses, or regulatory approval. The transfer restriction capability is the price of dollar-denominated stability.

But the implications go further than individual enforcement actions. Blacklisting creates a two-tier system: censorship-resistant assets like Bitcoin, and programmably censorable assets like USDC and USDT. Users who need dollar stability accept the tradeoff. Users who prioritize permissionless transfer choose Bitcoin or crypto-native alternatives.

The Drift Protocol incident crystallized a different version of this tension: when Circle refused to freeze stolen funds without a court order, the market punished the principled stance. Victims sued, and the protocol switched to Tether, which had demonstrated willingness to freeze faster. The market, in this case, rewarded censorship capability over process-driven restraint.

Implications for Payment Networks and Stablecoin Choice

For users and builders evaluating stablecoins, the blacklisting properties of each asset are a first-order consideration. The choice between USDC and USDT is not just about liquidity, reserves, or yield: it is about which issuer's enforcement philosophy and jurisdictional exposure you are comfortable with.

Payment networks that route stablecoins need to account for the possibility that tokens in transit, in escrow, or held in smart contracts could be frozen. Understanding these regulatory dynamics helps users make informed decisions about which stablecoins to hold and how much exposure to concentrate in any single issuer.

Some networks are exploring architectures that reduce single-issuer dependency. On Spark, for example, users can hold both native Bitcoin (which has no freeze function and no central issuer) and stablecoins like USDB in the same self-custodial wallet. This optionality lets users balance dollar-denominated stability against censorship properties based on their own risk assessment.

For those looking to explore this approach, General Bread provides a Spark-powered wallet where users can hold Bitcoin alongside stablecoins, giving practical access to both censorship-resistant and dollar-stable assets. Developers building payment applications can integrate similar capabilities using the Spark SDK.

What to Watch

Several developments will shape how stablecoin blacklisting evolves in the coming months.

• GENIUS Act final rules (due July 2026) will define exactly how fast issuers must respond to seizure warrants and what "burn" capabilities are required.
• The Circle class action lawsuit over the Drift Protocol exploit will test whether stablecoin issuers have a legal duty to freeze stolen funds proactively, even without court orders.
• Tether's improvements to its Tron blacklisting mechanism could close the 44-minute front-running window that allowed $78 million in illicit transfers in 2025.
• OFAC's continued expansion of crypto addresses on the SDN list (currently 1,200+ across 17 chains) will increase the compliance burden on all stablecoin issuers.
• Institutional adoption of stablecoins for payment rails will force enterprises to develop formal policies for managing freeze risk in their treasury and settlement flows.

The ability to freeze stablecoins is not going away. If anything, regulation is making it mandatory. The question for users and builders is not whether to avoid freezeable assets entirely, but how to structure holdings and systems to manage the risk appropriately.

This article is for educational purposes only. It does not constitute financial or investment advice. Bitcoin and Layer 2 protocols involve technical and financial risk. Always do your own research and understand the tradeoffs before using any protocol.