A targeted address response

BitGo said it was taking steps to freeze USD1 at a specific address identified by World Liberty Financial as having received stolen funds, according to its original statement. Its security team reported no indication of a security issue at BitGo. The company said the targeted action did not affect other USD1 services, which remained active.

World Liberty Financial subsequently said it had worked with BitGo to freeze stolen USD1 and WLFI tokens. That statement describes completed freeze action but gives no amount. WLFI is a separate token; it should not be counted as additional USD1.

Separately, World Liberty co-founder and CEO Zach Witkoff put the USD1 involved in proactive freeze steps at $27 million. That amount is his stated USD1 figure, not a combined value for USD1 and WLFI or an independently reconciled recovery total.

Who is responsible for USD1?

World Liberty Financial’s official FAQ identifies BitGo as USD1’s issuer. World Liberty and its affiliates own the brand and supply certain services, while BitGo handles initial purchases, redemptions and associated technical infrastructure. Describing the response as a collaboration is more accurate than treating the brand owner and issuer as interchangeable organizations.

The stablecoin’s backing and redemption model

The documentation describes USD1 as a dollar-redeemable stablecoin backed by reserves including short-term U.S. government instruments, dollar deposits and cash equivalents held or maintained by BitGo entities. Eligible BitGo customers can redeem directly; other holders may use supporting platforms subject to their terms. These are product arrangements, not evidence that a particular stolen balance has been reimbursed.

What the company’s wording leaves open

Taking steps to freeze an address is a statement about an action under way. It should not be silently rewritten as a completed return of funds. The cited post does not supply a final recovery ledger, a customer allocation or a dollar amount for this targeted intervention. This article does not infer those details from the size of another issuer’s reported freeze.

Why targeted action is different from a token-wide halt

A restriction aimed at one address can coexist with other services remaining available. BitGo’s statement makes that distinction explicit. Readers should therefore avoid generalizing from this incident-specific action to a claim that USD1 as a whole stopped operating or that the issuer reported its own compromise. The scope of a response matters as much as its existence.

The next evidence to look for

A subsequent update could reconcile the balance secured and identify the process for returning assets. Clear attribution should continue throughout: who identified the address, who controlled the token restriction and who confirmed the eventual outcome. Those roles may be coordinated without being identical.

For the broader incident, read our latest Binance report and our explanation of frozen versus recovered funds. Our stablecoins and reserves guide explains the underlying issuer model.

Sources

Information checked October 30, 2026, 05:25 UTC. Incident figures describe the cited announcements, not a live audited balance.