USD1's live contract holds powers its public code does not show — what a stablecoin issuer can actually do

The contract running USD1, a stablecoin with about $4 billion in circulation, contains administrative functions that the issuer's own public code repository does not display, including functions that can move a balance out of an address once that address has been frozen. The gap was raised this week by Tron founder Justin Sun, who has been in a long-running dispute with the issuer, Trump-backed World Liberty Financial. The functions are not concealed from anyone who reads the deployed contract on a verified block explorer, but they are absent from the code the project publishes itself.

USD1 runs behind an upgradeable proxy that switched to an implementation called StablecoinV2 on April 5. Two of its functions apply to frozen accounts. One, named drain, transfers a frozen address's entire balance to the contract owner. The other, reallocate, moves a specified amount from a frozen address to another address. Neither requires the affected holder's approval. They sit behind privileged permissions and act only on balances that have already been frozen, so they do not let arbitrary users reach into someone else's USD1. But the conclusion Sun drew from them is correct on its own terms: once an address is frozen, no amount of cold storage or multisignature setup on your side overrides a control that lives inside the token contract.

Controls of this kind are not unusual for centralized stablecoins. Tether and Circle both retain the ability to freeze or blacklist addresses holding USDT and USDC, tools issuers maintain for sanctions compliance, court orders and law enforcement requests. BitGo, USD1's current issuer and technical provider, states in its terms that it may freeze or upgrade USD1 and, in certain legal or compliance circumstances, render assets permanently unusable. That authority has already been exercised at scale: in June the issuer froze wallets connected to the exchange HTX during a separate dispute, and HTX responded by delisting USD1 entirely and converting customer balances into USDT.

The narrower issue is the disclosure gap rather than the existence of the powers. World Liberty's public repository includes minting, burning, freezing and pausing, but does not show drain, reallocate or the V2 initializer present in the live implementation. A developer or investor who relied on that repository would finish with an incomplete picture of who can do what to a USD1 balance. The available evidence does not establish that the repository was left out of date in order to mislead anyone, and the discrepancy says nothing about reserves, backing, or any unauthorized movement of USD1 out of holder accounts. Sun has compared the pattern to techniques used in rug pulls; the code gap by itself does not support that characterization.

The timing is what raises the stakes. The claim arrived about a week after the Office of the Comptroller of the Currency granted preliminary conditional approval to World Liberty Trust Company, a proposed national trust bank meant to take over USD1 issuance, redemption and reserve management from BitGo. That approval is conditional rather than final: the bank cannot begin operating until it satisfies pre-opening requirements, and the regulator reserved the authority to modify, suspend or rescind it. Meanwhile USD1's circulating supply has fallen by more than $1.3 billion from a February peak above $5.3 billion to about $4 billion, according to DeFiLlama, a decline that began before these allegations. The underlying feud is older still, running through Sun's $45 million investment in the WLFI token, restrictions on his access, and lawsuits in both directions, and World Liberty's chief executive has publicly disputed Sun's account of a recent hearing.

For a beginner, the useful takeaway is about where custody stops. Holding your own keys protects you from an exchange failing; it does not protect you from the issuer of the token you are holding, because a fiat-backed stablecoin is a company's promise wrapped in a contract that company controls. Under federal stablecoin rules, issuers are required to hold identifiable reserves backing outstanding tokens at least one to one, kept separate from the issuer's other assets, which is a real protection but a different one from control over your balance. If you want to know what a token can do to you, the source of truth is the verified contract on a block explorer, not a project's repository link or its marketing page. This is information, not advice.