Binance Hackers' $2.85B Loss Highlights UK Need for Stablecoin Freeze Rules

The Binance hack demonstrated the efficacy of stablecoin freezes, prompting calls for the UK to mandate clear freeze regulations for listed coins.

The Scale of the Heist and the Unexpected Success of Freezes

Last weekend, the Federal Bureau of Investigation pointed to North Korea as the perpetrator behind the $6.3 billion Binance hack, an event that analysts are already labeling the largest cryptocurrency heist on record. While the sheer scale of this theft has dominated headlines, a less discussed, yet crucial, aspect is what went right in its aftermath.

Despite the staggering sum stolen, the hackers have been unable to retain a significant portion of their illicit gains. Approximately $2.85 billion of the funds have been frozen. This success is largely attributable to the composition of the stolen assets; a remarkable 94% of the frozen funds were held in stablecoins.

Centralized Control as a Tool Against Crypto Crime

While the hack itself was a devastating event, it inadvertently highlighted how centralized control, often a point of contention for crypto purists, can serve as a potent weapon against crypto-related crime. Unlike other digital assets, stablecoins can be frozen by their issuers, offering victims a tangible opportunity to prevent stolen funds from disappearing into the wrong hands.

This capability, however, raises a critical and complex question: if private companies possess the power to freeze billions of dollars in assets, who determines the criteria for such actions and when they should be permissible? The United Kingdom now has a pivotal opportunity to establish these guidelines.

The Race Against Time: Hackers’ Initial Moves and Issuer Response

To grasp the significance of the freeze, one need only consider the hackers’ actions in the immediate aftermath of the breach. It was evident they understood the narrow window of opportunity to move the stablecoins before intervention was possible.

Within the first hour of the hack, they had already converted $325 million worth of stolen USDT (Tether’s stablecoin) into Ether, seeking to exchange an asset susceptible to freezing for one that was not. Fortunately, stablecoin issuers acted swiftly. Tether initiated its first major freeze just 37 minutes after the stolen funds reached the hackers’ primary wallet, with Circle following suit three minutes later, blocking the movement of USDC. Without these timely interventions, a far greater portion of the stolen funds could have been irretrievably lost.

The effectiveness of the freeze, to its credit, was largely due to a select group of companies making real-time decisions to deploy this measure.

The Need for Clear Standards and Emerging Legal Challenges

The core issue, however, is the absence of a universally agreed-upon standard that defines when a freeze is justified and the required speed of response. The consequences of this ambiguity are beginning to surface.

For instance, Circle is currently facing a proposed class-action lawsuit from Drift Protocol investors who allege the company failed to freeze approximately $230 million in stolen USDC following an April hack. Their contention is that Circle could have prevented the funds from being moved but did not act promptly enough.

Concurrently, Tether is being sued in New York by two businessmen who claim their assets were frozen months prior to any seizure warrant being issued. Tether has publicly refuted these allegations, deeming them baseless.

Bridging the Gap: Traditional Banking vs. Stablecoin Issuers

In my experience within the payments and banking sectors, it is not uncommon for traditional banks to freeze accounts. One might argue that if banks can routinely exercise this power, stablecoin issuers should be able to do the same.

My argument is not against their ability to freeze assets, but rather that banks do not unilaterally decide to do so. Their actions are typically triggered by legal grounds and are subject to challenge. Stablecoin issuers now wield comparable power, yet they must operate with greater speed and across international borders. Therefore, it is imperative that they be provided with a clear regulatory framework.

The UK’s Regulatory Landscape and a Proposed Solution

A significant challenge in regulating stablecoin issuers is that major players like Tether and Circle are not based in the UK, limiting the direct authority of British regulators. However, the UK can exert influence by controlling which stablecoins are accessible to its consumers, a path it has already begun to tread.

In June, the Financial Conduct Authority (FCA) unveiled its cryptoasset regime. This framework mandates that UK trading platforms conduct due diligence and publish a disclosure document before listing any coin, including overseas-issued stablecoins. This regulation is set to take effect on October 25, 2027.

The Bank of England is also in the process of finalizing its Code of Practice for systemic stablecoin issuers by the end of this year. This code will apply to stablecoins used extensively enough in payments to impact UK financial stability.

Neither of these frameworks currently establishes the explicit obligations for freezing stolen funds that I believe are essential. However, as both are still under development, the UK has an ideal opportunity to address this gap proactively, rather than attempting to implement new requirements retrospectively.

A Two-Pronged Approach for Stablecoin Listings

I propose a solution that I believe would be effective: before a stablecoin can be offered on a UK platform, its issuer must agree to two fundamental conditions.

Firstly, the issuer must be contactable and prepared to act. While Tether and Circle demonstrated this capability last week, the victim was the world’s largest exchange. Smaller UK platforms should receive the same level of responsiveness. Many smaller crypto businesses I work with lack the profile of Binance or direct access to issuers like Tether, leaving them vulnerable under the current system.

Secondly, a clear timetable for subsequent actions must be established. If an issuer freezes funds, it should be obligated to notify the National Crime Agency on the same day. The freeze should then automatically expire unless a court order is obtained to maintain it.

These proposals are not overly contentious. They would empower law enforcement to intervene in cases of stolen funds and simultaneously protect individuals from having their assets frozen indefinitely without legal justification.

The Binance hack has underscored the potential for stablecoins to provide victims of crypto crime with a means to recover stolen assets before they are permanently lost. This crucial safeguard should not be a privilege exclusive to the world’s largest exchanges.