How did the United States confiscate Iran's $1 billion in cryptocurrency assets?

Today I saw a short video with very attention-grabbing subtitles: The US Treasury Secretary said the US confiscated $1 billion worth of Iranian crypto assets, and some people don’t even realize their wallets have already been taken.

Short video news screenshot

This kind of statement easily leads to an intuitive question: Isn’t virtual currency decentralized? Aren’t wallets only controllable by private key holders? How could US law enforcement possibly transfer someone else’s coins?

Let’s start with the conclusion.

The US has not rewritten the blockchain ledger, nor has it cracked all wallets out of thin air. Its actions target several entry points connecting crypto assets to the real world: exchanges and custodial platforms, stablecoin issuers, private key and device control. On-chain assets are hard to directly “confiscate,” but as long as assets pass through these entry points, they can be frozen, seized, or transferred into law enforcement-controlled wallets.

Three paths for law enforcement to control crypto assets

What exactly does the news say?

In public reports, US Treasury Secretary Scott Bessent stated around May 29, 2026, that the US had seized about $1 billion in crypto assets related to Iran, framing this within the context of the “Economic Fury” economic pressure campaign against Iran. The phrase “grabbed the wallets” in the short video likely also comes from this public speech.

But here, it’s important to note the difference in tone. In recent official announcements, the more stable, verifiable statement is: these actions have resulted in nearly $500 million worth of crypto assets related to the Iranian regime being frozen. On April 23, 2026, Tether also publicly confirmed that it had cooperated with the US government to freeze over $344 million USDT across two addresses. USDT is Tether’s USD stablecoin, one of the most liquid stablecoins worldwide. Tether said these actions were coordinated with the US Office of Foreign Assets Control (OFAC) and US law enforcement agencies. OFAC is the US Treasury department responsible for sanctions enforcement, and many cross-border financial institutions treat its sanctions list as a high-pressure compliance requirement.

Therefore, this news should not be simply understood as “the US hacked into Iranian wallets.” A more accurate understanding is: through sanctions lists, on-chain tracking, cooperation from stablecoin issuers, control by exchanges or custodians, and judicial confiscation procedures, a batch of wallets, accounts, or assets related to Iran have been rendered unusable. As for the $1 billion figure, current public materials do not provide complete addresses, currencies, or enforcement paths; it should be regarded as the cumulative public claim by US officials, not a fully transparent on-chain fact.

Crypto wallets are not just one type

Many people, upon hearing “wallets taken,” imagine a cold wallet holding Bitcoin, with seed phrases written on paper, known only to the owner. Such self-custodied wallets are indeed the core security narrative of crypto assets: whoever controls the private key has the power to transfer.

But in reality, “wallets” are much more complex. Ordinary users see BTC, ETH, USDT balances on exchanges, but often these are not wallets where they hold the private keys independently; instead, the platform keeps the ledger for your account. The true control of private keys might belong to exchanges, custodians, market makers, payment platforms, or fund service providers. If law enforcement obtains a court order, sanctions basis, or if the platform cooperates voluntarily, they can request the platform to freeze accounts, restrict withdrawals, or transfer assets.

This is similar to how bank accounts and cash in your wallet are not the same thing. The money in your bank account appears as your balance, but its use can be affected by banking systems, regulatory orders, and judicial procedures. Similarly, crypto assets held in centralized exchange accounts are subject to real-world control layers. When the short video says “wallets were stolen,” in this context, a more accurate description might be that the accounts were frozen, or custodians transferred assets to law enforcement-designated wallets.

The US Department of Justice has long explained similar logic in materials on crypto law enforcement: if assets are controlled by third-party exchanges or online wallet services, law enforcement can serve seizure warrants to these custodians; if assets are on the suspect’s own device, hardware wallet, or paper wallet, the focus shifts to finding private keys, seed phrases, passwords, and accessible devices. Once law enforcement has a valid private key, they must be ready to quickly transfer assets into law enforcement-controlled wallets, because the original holder or associated persons might transfer them first.

In plain language, this means: on-chain transfers have no special law enforcement backdoors; whoever can sign can move the coins. To control truly self-custodied wallets, law enforcement must first obtain the private key or control device. With it, they can initiate on-chain transfers just like any owner; without it, they can only freeze addresses, monitor inflows and outflows, or wait for assets to enter exchanges or stablecoin issuers’ control.

Stablecoins are not decentralized assets

In this incident, the most important thing for ordinary readers to understand is stablecoins. Many people treat USDT as on-chain cash dollars, and it indeed functions similarly: fast transfers, clear arrivals, high cross-platform liquidity. But USDT, USDC, and similar centralized stablecoins are not “cash without an issuer.” USDC is issued by Circle, and like USDT, it has a clear issuer, reserve arrangements, and compliance controls.

The $344 million frozen by Tether is a typical example. Tron or Ethereum itself won’t shut down just because the US government issues a directive, but stablecoin issuers can restrict certain addresses from transferring via smart contracts and backend rules. The assets still appear on-chain at the address, but this portion of tokens can no longer move freely like normal USDT.

This is a risk many crypto users tend to overlook: you hold on-chain tokens, but behind the tokens there is an issuer; you use public blockchains, but the usability of stablecoins is affected by issuer rules, sanctions lists, judicial requests, and anti-money laundering measures. For ordinary legitimate users, this mechanism may not impact daily use; but for sanctioned entities, black market funds, scam funds, terrorist financing, or money laundering networks, the “freezability” of stablecoins has become a crucial law enforcement tool.

From this perspective, stablecoins are becoming an interesting financial infrastructure: they leverage the transparency and composability of public chains while retaining familiar compliance control points from traditional finance. Chain analysis firms can track fund flows, regulators can flag high-risk addresses, issuers can cooperate in freezing, and exchanges can refuse deposits or limit withdrawals. Many once believed crypto assets inherently bypass financial regulation, but as they become mainstream in finance, they are increasingly integrated into the real-world compliance network.

Self-custody also has boundaries

Does avoiding exchanges and USDT mean absolute safety if you only hold native BTC or ETH?

Technically, self-custody greatly shifts control back to the holder. As long as private keys are not leaked, law enforcement cannot directly freeze native Bitcoin like a bank account. The Bitcoin network has no company that can answer a call to freeze an address, and Ethereum’s native ETH has no issuer that can blacklist addresses. This is the most powerful aspect of crypto assets.

But this does not mean they are detached from the real world. Private keys may be stored on phones, computers, hardware wallets, paper, cloud drives, or password managers; wallets may be on exchanges, custodians, or multi-party MPC services; ultimately, funds may need to enter exchanges to convert to fiat, pay for goods, or settle trades. MPC (Multi-Party Computation) is a technology that splits private key control among multiple parties to enhance security, but it also introduces service provider, approval process, and permission design issues.

National-level law enforcement’s most effective approach is often not direct confrontation with the chain, but targeting people, devices, platforms, and fund exits. They can search devices, request platform cooperation, freeze stablecoins, sanction addresses, refuse certain funds at exchanges, or wait until the funds enter the regulated financial system. The transparency of the blockchain amplifies this capability, as every large transfer, split, aggregation, cross-chain movement, or deposit can become an investigative clue.

Therefore, self-custody enhances “others cannot easily sign on your behalf,” but does not make assets disappear from the legal world. Private key management, source of funds, counterparties, deposit and withdrawal paths, and compliance with sanctions and AML rules still determine whether these assets can be safely used in the real world.

Summary

For ordinary users, don’t automatically equate “my crypto assets on-chain” with “no one can control them.” If assets are on exchanges, it’s also important to consider the jurisdiction, compliance policies, account real-name verification, and source of funds. If assets are stablecoins, understand the issuer’s freezing mechanisms. If assets come from high-risk addresses, mixing services, black market funds, or sanctioned entities, they are likely to be monitored during subsequent exchange or payment use, thanks to chain surveillance systems that continuously identify sources and transaction risks.

The core value of crypto assets indeed comes from personal control, global liquidity, and transparency. But these do not mean there are no real-world constraints. On the contrary, as the scale of funds grows, counterparties become more complex, stablecoins become mainstream, and exchanges serve as entry points, the connection between on-chain assets and traditional law enforcement becomes tighter.

So, the crypto world has not been “cracked” by the US, but it is also not as vacuum-sealed and free as many imagine.