Tron (TRX) and Tether Shut Down T3 Crime Unit That Froze $450 Million

A Quiet End in Late August

The T3 Financial Crime Unit, the anti-crime alliance TRON (TRX), Tether and TRM Labs formed in September 2024, was terminated in late August, according to people familiar with the matter, and the shutdown was never announced when it happened. All three companies have since confirmed the wind-down without discussing the details, and Binance, which became the unit's first outside partner in 2025, declined to comment. The split developed over the past year, driven by slow response times and weak coordination among members rather than any single incident, one person said. The termination stayed quiet until this week, when details emerged through interviews with people close to the program. T3 was built for speed against illicit use of Tether's USDT, the largest stablecoin by market cap, on the Tron blockchain, the rail that carries most of the token's supply. TRM supplied blockchain intelligence, TRON (TRX) contributed visibility across its network, and Tether held the power to freeze tokens at the issuer level. The structure opened to outsiders in August 2025, when the unit launched T3+, counting Binance as its first member; the opening joint case immobilized almost $6 million connected to a pig-butchering scam. A Tron DAO spokesperson called T3 a successful program that has concluded, said Tron continues to work with law enforcement against illicit activity on its network, and promised to share details of a new anti-crime initiative later. Tether said it will continue working with TRM to disrupt the flow of illicit funds and takes part in Beacon Network, TRM's real-time intelligence-sharing network that went live in August 2025. Tether CEO Paolo Ardoino also unveiled the Financial Access and Systemic Empowerment Foundation on X on October 31. Ari Redbord, who leads global policy at TRM, said T3 achieved extraordinary things and that Beacon Network builds on that work.

A $450 Million Record Before the Hack

The freeze tally climbed through the unit's two-year run. TRM put the total above $250 million in less than a year of operations, then above $300 million in February, when the analytics firm announced its $70 million Series C round. The unit's own May statement said T3 had frozen more than $450 million in illicit assets, with work spanning authorities in 23 jurisdictions across five continents, including the United States, Spain, Germany, Brazil and the United Kingdom. Police requests in account-takeover and violent-crime emergencies were answered with freezes inside 24 hours, the release said, and the Financial Action Task Force named T3 a leading example of public-private enforcement in guidance issued in November 2025. The May release made no mention of the coordination problems that people close to the unit have now described. The exit came two months before the largest theft in crypto history: Binance put its October 29 loss at $6.34 billion, and the attack has since been tied to North Korea. TRON (TRX) has served as the main laundering route, with roughly $220 million of stolen TRX moving through the Tron network, according to an Elliptic update published Thursday. Freezes have still removed a large share of the haul without the unit in place: Tether has said its own post-attack freezes covered more than $1.567 billion in USDT, and about $2.85 billion of the stolen funds in total has been frozen or seized, per figures from Elliptic. The chain's weight in the stablecoin economy explains part of the exposure: our earlier coverage put Tron's average USDT supply in Q3 at $90.75 billion, overtaking Ethereum. Containment steps followed at exchanges, with Upbit suspending TRON deposits and withdrawals from October 31, and the Tron (TRX) price slipped after the breach before recovering to about $0.31.

The Freeze Power Sits With Tether

The freeze power at the center of the T3 model never belonged to the alliance; it sits with Tether as issuer, and the $1.567 billion immobilized after the breach shows that power works without the unit's machinery. What T3 uniquely offered was one channel through which police in 23 jurisdictions could reach the token issuer, the network and an analytics firm simultaneously, and that channel closed in August without a public explanation. The open item is structure: Tron has promised a new anti-crime initiative but has not named its partners, its funding or its freeze process. Until those details appear, cross-border requests will run through separate company channels rather than a single desk, and the burden of proving the replacement works will fall on the first case it handles.