Updated
Recent news · Asset control
Who really controls your crypto?
From Conduit's freeze lawsuit to the Bitget theft: understand asset security and self-custody.
Real events remind us:
Control is never a simple question in crypto.
When funds are frozen,
even a business can lose access to its assets.
The complaint says operating funds were frozen for over a year and seeks their release and damages.
The company alleges the prolonged freeze disrupted operations and seeks release of the funds and compensation.
— Summary of the complaintUS$2.76million
Filed · Freeze date
Reported factsOn October 5, 2026, Conduit sued Tether in the U.S. District Court for the Southern District of New York, seeking an end to the wallet freeze, restored access to its funds and damages. The complaint concerns approximately US$2.76 million in USDT operating funds. The cited document is the plaintiff's complaint, not a court ruling.
Plaintiff's allegationsThe plaintiff says its funds have been inaccessible since September 24, 2025, that the wallet is unrelated to a third party in a Brazilian investigation, and that the freeze affected prepayments, settlements and operations. These are allegations, not findings made by the court.
Our analysisHolding signing authority does not prevent a stablecoin contract from restricting transfers. This dispute concerns the issuer's basis for freezing funds and available remedies; it does not establish that Conduit received illicit funds.
According to the plaintiff, the wallet's funds were frozen.
According to the plaintiff, counsel requested release within five business days.
Complaint filed in the Southern District of New York.
An unauthorized transfer
can leave a platform's hot wallets facing major losses.
The October 12 official final verification put the affected amount at approximately US$388 million.
About US$318,000 was frozen in one linked wallet on September 25; frozen does not mean recovered.
Incident · Withdrawals restored by .
Approx.US$388million
Official October 12 updateSources: Bitget / Decrypt
Official disclosureBitget says some hot and warm wallets experienced unauthorized transfers on September 24, 2026. Its October 12 final verification put the affected amount at approximately US$388 million across 12 wallet addresses. This is a revised accounting of the same incident.
Platform investigationThe platform's investigation says attackers exploited a third-party security product to obtain privileged internal credentials and forge withdrawal instructions that bypassed controls. It says it isolated systems, patched the vulnerability and reset credentials; private-key compromise was ruled out, and cold wallets and the separate Bitget Wallet were unaffected.
Recovery progressPhased restoration of withdrawals was completed on October 2. Decrypt reported on September 25 that approximately US$318,000 in USDC and USDT in one linked address had been frozen. That was the freeze balance at the time, not funds already returned. The platform says tracing and recovery continue.
Our analysisHot/cold wallet separation, withdrawal permissions and third-party system risks are distinct from a stablecoin issuer's power to freeze tokens.
Unauthorized transfers affected some hot and warm wallets.
The platform says phased restoration of withdrawals was completed.
Official final verification updated the amount to approximately US$388 million.
After the news, check your everyday security habits.
Check your crypto safety score
How close are the risks in the news to your daily habits?
Answer five questions to see where your protection could improve.
Choose your habits. No wallet address or private key is needed.
Up to 20 points per question. This self-reported habit score does not guarantee protection from theft or freezes.
Question 1 of 5.
Asset storage
Choose what you actually do. Both custody and self-custody involve risks to manage.
Select an option to continue.
On the same blockchain,
different participants hold different powers.
Understanding them helps you manage risk.
Exchanges and other platforms manage custodial assets. A security incident can restrict withdrawals or expose users to losses.
A stablecoin issuer may freeze on-chain tokens in certain circumstances. Holding a private key does not remove that risk.
Self-custody puts private keys and signing in your hands. It also makes secure key storage and careful operation your responsibility.
Self-custody gives you control of keys, but does not remove a stablecoin issuer's freeze powers.
Better habits can reduce risk,
but no single approach removes every risk.
Stay alert and keep learning.
Everyday convenience
Choose a mobile app or browser-extension wallet whose private keys you control, for small everyday transfers and on-chain apps.
Software wallets are often online. Keep only the funds needed for daily use and separate them from long-term holdings.
Follow the official website to its app-store listing, check the publisher and domain, and keep the wallet and device updated.
Create an independent everyday wallet with a small balance. Do not import a long-term hardware wallet's recovery phrase into software.
Store recovery phrases and private keys securely offline. Do not screenshot, upload or share them with support, websites or strangers.
Verify the network, full address, amount, contract and allowance. Pause if you do not understand a transaction or signature.
Revoke permissions you no longer use. Disconnecting an app does not revoke token approvals you already granted.
Avoid unfamiliar token or NFT claim, swap or unfreeze links. Seek help only through official wallet channels.
Separate recovery phrasesNew accounts may still share one recovery phrase. Generate independent phrases for daily and long-term wallets. A compromised device can still affect several wallets.
Understand the limitsOn-chain transactions are usually publicly visible. Self-custody still carries device and signing risks and cannot cancel a stablecoin issuer's freeze powers.
Asset storage
Choose what you actually do. Both custody and self-custody involve risks to manage.
Select an option to continue.
Your answer: I separate everyday and long-term assets, limit daily-app funds and have confirmed recovery arrangements.
Maintain separation and follow security notices from your platforms, wallets and devices.
Your answer: My self-custody keys are backed up offline and checked; custodial account recovery is confirmed and protected.
Check backups and recovery materials regularly. A wallet password or PIN does not remove the risk from an exposed recovery phrase.
Your answer: I do all of the above, install only from official sources and use phishing-resistant authentication where supported.
Maintain updates and trusted installation sources. Hardware authenticity checks cannot rule out all modifications.
Your answer: I perform these checks and regularly review and revoke unnecessary permissions.
Keep allowances limited to what is needed. Simulations and security warnings cannot detect every threat.
Your answer: I do all these checks and retain records, pause settlement if the source is unclear, and seek professional review when needed.
Continue checking and keeping records. Professional screening and self-custody cannot guarantee an issuer will never freeze tokens.
