Tether and Tron Dissolved T3 Crime Unit Two Months Before $6.3B Binance Hack

The T3 Financial Crime Unit — the anti-crime alliance formed by Tron, Tether and TRM Labs in 2024 and later expanded to Binance — quietly shut down in late August, roughly two months before the record $6.34 billion hack of Binance on Oct. 29.

Bloomberg reported the shutdown Wednesday, citing people familiar with the matter. The alliance had frayed over the past year amid slow response times and poor coordination among members, one of the sources said. None of the companies announced the wind-down at the time. Tron, Tether and TRM confirmed the initiative had ended, without commenting on details. Binance declined to comment.

"While the very successful T3 program has concluded, Tron remains committed to working to help stop illicit activities on the blockchain, in partnership with law enforcement," a Tron DAO spokesperson told Bloomberg. The spokesperson said Tron will share details of a new anti-crime initiative later.

A Tether spokesperson said the company will keep working with TRM to disrupt illicit funds and now participates in Beacon Network, the real-time intelligence-sharing network TRM launched in August 2025. Tether is also building the Financial Access and Systemic Empowerment Foundation, or FASE Foundation, which CEO Paolo Ardoino unveiled on X on Oct. 31.

TRM's global head of policy and government affairs, Ari Redbord, said "T3 achieved extraordinary things" and that "Beacon Network builds on that work."

What was T3 built to do?

Tron, Tether and TRM established T3 in September 2024 as a public-private unit targeting illicit use of Tether's USDT stablecoin on the Tron blockchain. The pitch was speed. TRM supplied blockchain intelligence, Tron supplied network visibility, and Tether supplied the power to freeze tokens at the issuer level.

The results looked strong on paper. In August 2025, the unit said it had frozen more than $250 million in illicit assets in under a year and launched T3+, a program for outside partners, with Binance as its first member. Its first joint effort with the exchange froze almost $6 million tied to a pig-butchering scam.

The totals kept climbing. TRM put the tally above $300 million in February, when it announced a $70 million Series C round. In May, the unit said it had frozen more than $450 million and was working with authorities in 23 jurisdictions on five continents, including the U.S., Spain, Germany, Brazil and the U.K. That May release said the unit had frozen funds within 24 hours of law enforcement requests in account takeovers and violent crime emergencies. It made no mention of the coordination problems Bloomberg has now described. TRM also noted that the Financial Action Task Force cited T3 in November 2025 guidance as a leading model for public-private enforcement.

Why does the timing matter?

The shutdown predates the largest theft in crypto history. Binance put its Oct. 29 loss at $6.34 billion, and blockchain analysis firms have linked the attack to North Korea.

Tron has been a main laundering route for the stolen funds. About $220 million in stolen TRX has moved through the Tron blockchain so far, blockchain analytics firm Elliptic said in an update Thursday.

The industry still froze a large share of the haul without T3. Tether alone said it froze more than $1.567 billion in USDT after the attack, and roughly $2.85 billion of the stolen assets has been frozen or seized, CNBC reported, citing Elliptic.

The power to freeze USDT sits with Tether, not with the defunct alliance. What T3 actually offered was a single channel: police in 23 jurisdictions could reach the issuer, the chain and an analytics firm at once.

Whether Tron's promised replacement restores that structure — and who else joins it — remains the open question for stablecoin enforcement in the new year.