After the 29 October 2026 Binance breach, about $3 billion did not simply vanish. It was frozen, coin by coin, by the companies that issue the stablecoins involved. This article explains who froze what, how a freeze works, and why a frozen total is not the same as money returned.

The freeze in numbers

The largest single freeze came from Tether, which froze more than $1.567 billion in USDT. Circle froze about $823 million in USDC. Ripple froze about $200 million, and World Liberty Financial froze $27 million in USD1. Together with other frozen assets, the reported total reaches about $3 billion, against an estimated overall impact of about $6.3 billion. All of these figures are preliminary while tracing continues.

How an issuer can freeze a coin

Stablecoins such as USDT and USDC are issued by a company that controls the token's contract, and that contract includes a freeze function. When the issuer freezes an address, the coins in that address cannot be moved onward, even though they still exist on the blockchain. That is a power centralised stablecoins have by design, and it is the reason such a large share of the stolen value could be stopped quickly. It is also a power that decentralised assets such as bitcoin and ether do not offer in the same way, which is why the frozen share is concentrated in stablecoins.

Why the freeze happened so fast

Speed mattered because the stolen funds were moving through a sweeper setup, with delegated code forwarding new arrivals onward. Every hour of movement meant more addresses to trace and more conversions to follow. Issuers acted on the attacker's addresses as they were identified, freezing what was still sitting in those addresses before it could be moved again or swapped into assets that cannot be frozen.

Frozen is not recovered

This is the most misunderstood part of the story. A frozen coin has been stopped, not returned. Returning frozen funds to victims is a separate legal and technical process that has not been described in full yet, and some frozen value may stay frozen for a long time while investigations and claims play out. So the honest way to read the numbers is: about $6.3 billion estimated taken, about $3 billion of it stopped from moving further, and the amount eventually returned still unknown.

What Binance said about covering the rest

Co-CEO Yi He said all losses would be covered from company funds and the SAFU emergency fund, worth about $1 billion in bitcoin, and that user funds are safe. That pledge is separate from the freezes: the freezes stop the attacker's coins, while the cover pledge is about making users whole from Binance's own resources. Binance also suspended deposits and withdrawals during the response, with resumption expected to begin within about 48 hours, and its next proof-of-reserves snapshot is due on 1 November 2026.

Frequently asked questions

FAQ: Who froze the most? Tether, with more than $1.567 billion in USDT. Does freezing return money to users? No, it only stops the coins from moving; return is a separate process. Why could only some assets be frozen? Because the freeze function belongs to the stablecoin issuers, while bitcoin and ether have no issuer that can freeze them.