The T3 crime unit shut down in late August, about two months before Binance’s October 29 security incident, which the exchange said affected approximately $6.34 billion in digital assets. Bitcoin Magazine, citing Bloomberg’s reporting on November 5, said the alliance’s end wasn’t publicly announced at the time. Its members have described other efforts to counter illicit crypto activity.
The timing doesn’t establish that T3 could have prevented the Binance incident. It does raise questions about how the companies coordinate with authorities when stolen assets move across networks and an issuer may be able to freeze them.
- Tether, Tron and TRM Labs launched T3 in September 2024 to target illicit USDT use on Tron.
- Bloomberg sources cited by Bitcoin Magazine said it ended in late August 2026 after reported problems with response speed and coordination.
- Tether reported in May 2026 that T3 had frozen more than $450 million in illicit assets and worked with authorities in 23 jurisdictions.
- Binance put the impact of its October 29 incident at approximately $6.34 billion in a November 3 report.
- Tether said it froze more than $1.5 billion in USDT within 30 minutes. Tron said it would share details of a new initiative.
T3 crime unit timeline
- September 10, 2024: Tether announced that it, Tron and TRM Labs had formed T3, a public-private effort focused on illicit activity involving USDT on Tron. The announcement said more than $12 million linked to scams and fraud had already been frozen. Tether’s announcement described the initiative’s focus and launch.
- August 12, 2025: TRM Labs announced T3+, a collaborator program, and named Binance as its first member. The announcement said T3 had frozen more than $250 million in criminal assets.
- May 2026: Tether reported that T3 had frozen more than $450 million since launch and worked with authorities in 23 jurisdictions, including the U.S., Spain, Germany, Brazil and the U.K.
- Late August 2026: The alliance wound down, according to Bloomberg sources cited by Bitcoin Magazine. Its members didn’t publicly announce the termination then.
- October 29 to November 5, 2026: Binance’s incident occurred on October 29. The exchange reported initial findings on November 3, and news of T3’s earlier shutdown was reported on November 5.
Why the T3 crime unit mattered
T3 brought together distinct capabilities. TRM Labs supplied blockchain intelligence, Tron supplied network visibility, and Tether had the ability to freeze USDT at the issuer level. The alliance offered law enforcement a single channel to reach the issuer, the blockchain and an analytics firm, according to the reporting.
Tether’s May update reported that T3 had frozen more than $450 million and worked with authorities in 23 jurisdictions. Those figures were reported by Tether.
Binance’s November 3 report described a sophisticated, multi-stage incident affecting approximately $6.34 billion in digital assets. Tether separately said it froze more than $1.5 billion in USDT within 30 minutes of the October 29 incident. That shows Tether could freeze tokens after T3 had wound down, but doesn’t establish that every affected asset was USDT or that all stolen funds were recovered. Binance’s incident update gives the exchange’s account.
Bitcoin Magazine reported that blockchain analysis firms linked the incident to North Korea. That is an attributed assessment, not a finding established by the evidence provided here.
Partner reactions and market context
Bloomberg sources described slow response times and poor coordination in the year before T3 shut down. These accounts came from unnamed sources, not a public postmortem. Tron, Tether and TRM confirmed the initiative had wound down but did not comment on the details of Bloomberg’s report, according to the coverage.
A Tron DAO spokesperson told Bloomberg that Tron remained committed to working with law enforcement and would later share details of a new anti-crime initiative. Tether said it would keep working with TRM Labs and was participating in TRM’s Beacon Network, a real-time intelligence-sharing network launched in August 2025. Ari Redbord, TRM’s global head of policy and government affairs, said, “T3 achieved extraordinary things” and “Beacon Network builds on that work.” Binance declined to comment, Bitcoin Magazine reported.
CoinGecko data at 19:13 UTC on November 5 put Bitcoin at $75,919, down 5.41% over 24 hours; Ether at $2,245.91, down 7.32%; and BNB at $690.45, down 3.66%. These are market snapshots. They don’t show that the T3 news or Binance incident caused the moves.
What the T3 crime unit shutdown means for freezes
The shutdown ended a shared operating structure, not Tether’s ability to freeze its own tokens. T3’s reported value was the connection among the issuer, blockchain, analytics team and authorities. Whether a replacement restores that coordination, and which organizations participate, remains open.
What to watch next
A near-term question is whether Tron publishes details of its planned initiative, including participating organizations and how requests will be handled. Tether’s work with TRM and its participation in Beacon Network are separate parts of the enforcement landscape. The reporting doesn’t say either replaces all of T3’s functions.
Binance said approximately $3 billion of assets had been frozen on-chain. Tether separately reported freezing more than $1.5 billion in USDT. The available evidence does not establish the final status of all affected assets or how much was ultimately recovered.
FAQ
What was the T3 crime unit?
The T3 Financial Crime Unit was formed by Tether, Tron and TRM Labs in September 2024 to address illicit activity involving USDT on Tron. Binance later became the first member of its T3+ collaborator program.
When did the T3 crime unit shut down?
Bloomberg reported that the alliance ended in late August 2026. According to Bitcoin Magazine, its members didn’t publicly announce the shutdown at the time.
Did T3 stop Tether from freezing funds after the Binance hack?
The reporting establishes no such link. Tether said it froze more than $1.5 billion in USDT within 30 minutes of the October 29 incident. Tether can freeze its tokens independently of the alliance, while T3 provided a shared coordination channel.
Sources
- Tether, TRON and TRM Labs Establish First-Ever Private Sector Financial Crime Unit to Combat Crypto Crime (tether.io)
- 29 October 2026 Binance Security Incident: Initial Findings and Response Update (www.binance.com)
- Tether and Tron Quietly Scrapped T3 Crime Unit Two Months Before $6.3 Billion Binance Hack (Bitcoin Magazine)
This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrencies are highly volatile; always do your own research before investing.
For advertising inquiries, please email . [email protected] or Telegram
