$2.85B frozen in Binance hack exposes a UK stablecoin rule gap

$2.85 billion of the $6.3 billion stolen in the Binance hack has been frozen, according to Elliptic data cited by Capitalixe co-founder Lissele Pratt; the FBI claimed that North Korea was behind the attack.

The scale has prompted analysts to call the theft the largest heist on record. Stablecoins represented 94% of the $2.85 billion frozen.

Pratt argues that centralized issuer control, often criticized within crypto, served as a practical enforcement tool. Issuers can block transfers, giving victims and law enforcement a route to stop some stolen value from reaching the wrong hands.

Less than one hour after the hack began, attackers sold $325 million of stolen USDT for Ether. The swap moved the proceeds from an asset their issuers could freeze to one they could not. A CertiK timeline places Tether’s first major freeze 37 minutes after the funds reached the hackers’ main wallet; Circle blocked USDC three minutes later.

Pratt wrote: “The freeze, to its credit, worked for the most part because a handful of companies decided, in real time, to use it.” The sequence indicates why speed mattered: Tether and Circle intervened before the stablecoin proceeds could move beyond recovery.

What does this change for UK platforms and issuers?

The power to freeze has outpaced the rules governing it. Issuers have no agreed standard for when a freeze is justified or how quickly they must respond. That gap now has produced two disputes over the timing and legal basis of intervention.

Circle faces a proposed class action from Drift Protocol investors, who allege that it failed to freeze roughly $230 million in stolen USDC after the April hack. The plaintiffs argue that Circle could have stopped the money from moving but did not act in time.

Tether faces a separate lawsuit in New York brought by two businessmen who say the issuer froze millions of dollars in their assets months before a seizure warrant existed. Tether has called those allegations baseless. Neither matter establishes wrongdoing, but both put the same operational issue before courts: what standard should govern an issuer’s emergency action.

Pratt compares stablecoin issuers with banks, which generally freeze accounts after a legal trigger and provide a route to challenge the action. Stablecoin issuers can act faster and across borders, improving the chance of stopping a transfer but leaving users without a uniform safeguard.

Neither Tether nor Circle, two of the largest issuers, is based in the UK, so British authorities cannot simply order either company to act. The UK’s leverage lies in market access: which stablecoins platforms may offer to customers.

In June, the Financial Conduct Authority published its cryptoassets regime. From 25 October 2027, UK trading platforms must complete due diligence and publish a disclosure document before listing a coin, including stablecoins issued overseas.

The Bank of England is finalizing its Code of Practice for systemic stablecoin issuers by the end of this year. It covers stablecoins used widely enough in payments to matter to UK financial stability. Neither framework currently sets clear obligations for freezing stolen funds.

Pratt’s proposal turns that gap into two listing conditions:

• Issuer readiness: The issuer must be contactable and ready to act. Tether and Circle could respond to Binance, but Pratt says smaller UK platforms, which lack the exchange’s profile or a direct line to the issuers, are most likely to wait. The response standard should extend beyond the world’s largest exchange.
• Notification and expiry: A freeze must trigger same-day notice to the National Crime Agency. The freeze should then expire if no court order keeps the wallet frozen. The timetable gives law enforcement time to intervene while preventing indefinite freezes without legal grounds.

These conditions would give smaller platforms a minimum response standard and give law enforcement a timely intervention route. They also address the risk Pratt identifies for account holders: rapid intervention without a transparent legal safeguard.

Pratt put the asymmetry plainly: “Tether and Circle did exactly that last week, but the victim was the world’s biggest exchange.” The position is that the recovery benefit should not remain a privilege reserved for institutions with direct issuer access.

The next formal deadline is the end of this year, when the Bank of England plans to finalize its systemic-stablecoin code. The FCA regime is scheduled to take effect on 25 October 2027; until explicit issuer duties exist, access to overseas stablecoins will continue to depend on private enforcement decisions.