- Justin Sun, founder of Tron, says the code World Liberty Financial published for its USD1 stablecoin doesn’t match the contract running , and that the live version lets privileged operators move balances out of frozen wallets.
- Sun is in active litigation with World Liberty Financial, so this is an interested party’s claim, not a finding. We have not seen the on-chain contract ourselves and could not locate primary reporting that verifies it.
- Freeze and clawback powers are normal for centralised stablecoins. Tether and Circle both hold them and both have used them. The argument here is about disclosure, not about whether such powers exist.
A stablecoin sitting in your own wallet feels like the safest thing in crypto. It doesn’t move, it doesn’t crash, and nobody else has your keys. That last part is where the assumption breaks, and a public row between two of the loudest names in the industry has dragged the mechanics into daylight.
Almost every dollar-pegged stablecoin you can buy is issued by a company, and that company writes rules into the itself. Those rules can normally freeze an address and, in several cases, take the balance back. protects you from an exchange failing. It does not protect you from the issuer, because the issuer’s authority lives inside the coin rather than inside your wallet.
So when you choose between USDT, USDC or anything newer, you’re choosing a counterparty and a set of terms, not just a peg. That matters more than the ticker.
What was actually alleged
On 21 August, Justin Sun said publicly that the source code World Liberty Financial published on GitHub for USD1 does not match the contract deployed on-chain, and that the live version carries administrative powers allowing privileged operators to move funds out of a frozen address without the holder’s consent. He compared the discrepancy to techniques used in , and said similar privileged functions were added to the separate WLFI token after launch.
In his words: “USD1’s highest-level permissions allow the issuer to move USD1 out of YOUR account into its own wallet, or anyone else’s, without your consent. ? Multisig? Doesn’t matter. The authority operates at the token contract level. Nothing you do can stop it.”
Two things need saying before any of that is treated as established. Sun is in active litigation with World Liberty Financial, which makes him an interested party rather than a neutral auditor. And we are working from a CryptoSlate write-up; we could not locate primary reporting or an independent audit confirming what the deployed contract does. Cryptobase has not inspected the contract, and nothing below should be read as verification of Sun’s specific claims about USD1.
Blacklist, freeze, clawback: the three powers
These words get used interchangeably in headlines and they mean different things.
A blacklist is a list of wallet addresses written into the token’s own code. If your address is on it, the token refuses to move. You can still see the balance in your wallet, and it looks entirely normal, but any attempt to send it fails. Nobody has taken anything from you; the coins simply stop working.
A freeze is the same idea by a different name, usually applied to a single address rather than a running list. In practice, most people use the two terms as one thing.
A clawback, sometimes called a burn-and-reissue, goes further. It lets the issuer destroy the tokens at a frozen address and create the same amount somewhere else, or in some implementations transfer the balance directly. The money doesn’t come back to you. It reappears under someone else’s control, usually a court-appointed recipient or the issuer’s own treasury.
Sun’s allegation is that USD1 has the third kind, and that the code published for public inspection doesn’t show it.
Why published code isn’t the same as running code
This is the part readers most often get wrong, and it applies far beyond this one dispute.
A GitHub repository is a folder of files a company chooses to publish. It carries no automatic relationship to the software actually running anywhere. A deployed , by contrast, is a compiled piece of code sitting at a specific address on a , and that is the thing enforcing the rules on your balance. The two can differ, whether through sloppy housekeeping, a repo that was never updated after a later change, or a deliberate omission.
The mechanism that makes this trickier is the upgradeable proxy. Most large stablecoins are deployed as two contracts rather than one. The address you interact with is a thin shell, the proxy, which holds the balances and forwards every instruction to a second contract, the implementation, that contains the actual logic. The point of the design is that the issuer can point the proxy at a new implementation without anyone needing to move funds or change the address they use. Bug fixes and compliance features get shipped without disruption.
The consequence is that the rules governing your tokens can change while the address stays identical. Whoever holds the upgrade key can rewrite what the token does. There’s no announcement requirement baked into the blockchain, and no notification arrives in your wallet.
Verifying any of this requires reading the deployed implementation on a block explorer and comparing it against the published files. That work is done by auditors and by researchers who publish their findings. Until someone does it here and shows the comparison, Sun’s claim about USD1 remains an assertion.
Tether and Circle already do this
The reason to be careful with a headline about hidden wallet powers is that the powers themselves aren’t hidden across most of the market. They are documented, and they’ve been used.
Tether, which issues USDT, operates a public blacklist and has frozen hundreds of millions of dollars across addresses at the request of law enforcement, including funds tied to sanctions cases and exchange hacks. Circle, which issues USDC, holds equivalent authority and used it in 2022 when it blocked addresses linked to the sanctioned mixer Tornado Cash after the US Treasury designated them. Neither exercise was controversial in the way a secret power would be, because both companies say in their terms that they can do it.
That’s the distinction worth holding onto. The complaint against World Liberty Financial, if Sun’s technical description holds up, isn’t that USD1 can freeze wallets. It’s that the published code allegedly understates what the live contract can do. Whether that gap exists is a factual question with a checkable answer, and it hasn’t been checked in public yet.
What this means if you hold stablecoins in the UK
British readers tend to use stablecoins as a parking space: somewhere to sit between trades, or a dollar balance held outside a bank. Both are reasonable, and both make the issuer’s terms the thing that actually governs your money.
A few practical points follow. Redemption is normally only available to verified corporate customers with a direct account at the issuer, so most retail holders get their dollars back by selling on an exchange rather than by redeeming with Tether or Circle. Stablecoins are not covered by the Financial Services Compensation Scheme, so there’s no £85,000 backstop if an issuer fails. And the freeze powers described above sit outside any UK process, since they’re exercised by the issuer under its own terms, usually in response to a US authority.
The Bank of England and the Financial Conduct Authority are both consulting on stablecoin rules, with a UK regime expected to take shape over the next year or two. Nothing is settled, and none of it changes the position on a dollar token issued abroad today. If you hold coins yourself, our guide to self-custody covers what your keys do and don’t protect you from, and this is a case where that boundary is sharper than most people expect.
What to watch
The thing that would settle the USD1 question is an independent contract review: someone with no stake in the litigation reading the deployed implementation, publishing the comparison against the GitHub repo, and naming which functions exist. Firms like these audits routinely, and this dispute is public enough to attract one.
Beyond that, watch whether World Liberty Financial responds with specifics rather than a denial. A line-by-line answer would resolve it; a general statement would not.
And when the next stablecoin launches with a big name attached, the useful question isn’t what the peg is or who’s backing it. It’s who holds the upgrade key, and what the terms say they can do with it.