When Assets Move—or Stop—Without Consent: The Limits of Crypto Wallet Control

One exchange received assets it never requested. Another sent assets it never authorized. Holders of a third asset can possess their wallet keys and still find their tokens frozen. Crypto wallet control looks different depending on who is trying to put money in, take it out or prevent it from moving.

The cases are distinct: the wave of tiny transfers from wallets attributed to HTX, the theft from Bitget’s hot and warm wallets, and Iran-linked USDT flows examined in a new US Senate staff report. They carry different intentions and consequences. Together, they challenge the easy assumption that whoever holds a wallet also controls every event involving its assets.

The transfer nobody asked to receive

In August, small transfers from wallets identified as linked to HTX reached addresses associated with other exchanges. Kraken said some customer accounts were briefly restricted after its platform received such funds. But people working inside exchanges told Unlock Blockchain that the wider problem extended to exchange hot wallets across the industry. They said affected operators temporarily could not move funds out of those wallets while compliance teams examined the exposure.

The sources consider the pattern deliberate. Unlock has not independently established how many exchanges were affected or who directed the transfers. HTX has denied initiating them and questioned whether the sending wallets were correctly attributed to it.

The amounts were tiny; the operational effect was not. An exchange hot wallet may handle substantial funds, yet its operator cannot refuse an incoming payment to its public address. If a transfer associated with a sanctioned source prompts the exchange to halt outgoing activity until it can separate or assess the funds, a sender can create disruption at very little cost. The arrival proves only that a transfer occurred. It does not prove that the exchange sought a relationship with the sender.

This is one limit of crypto wallet control: the operator can guard its keys and set withdrawal rules, but the address remains open to money it did not solicit. Its compliance response can then determine whether the rest of that wallet remains usable.

A valid transfer born of a false instruction

At Bitget, assets went in the opposite direction. According to the exchange’s account of its September breach, attackers exploited a flaw in a third-party security product, obtained high-privilege internal credentials and inserted forged withdrawal instructions into its wallet systems. Bitget says its private keys were not stolen. It’s hot and warm wallets nevertheless made unauthorized transfers, currently estimated at about $388 million. The independent forensic investigation remains in progress.

On-chain, those transfers were valid. That says nothing about whether the exchange wanted to make them. The attackers allegedly compromised the process that told the wallets what to sign, bypassing risk checks before ordinary withdrawal records were generated.

This is why a customer’s approved withdrawal-address list is beside the main point. The reported attack was on the exchange’s wallet infrastructure, rather than a customer choosing a destination inside an account. A signer that accepts a command because it appears to come from a trusted internal system can faithfully execute an instruction whose authority was forged.

Bitget is now tracing the stolen assets and working with others to freeze some of them. Freezing funds can help here. In the dusting case, a pause imposed by an exchange’s own compliance controls was part of the disruption. These are different mechanisms with opposite effects for the affected operator.

The digital dollar that can be stopped

The Iran-linked USDT case introduces a third party with power over a wallet: the issuer of the asset inside it. A USDT holder can control the keys to an address, but Tether can block that address from transferring its tokens. The wallet still exists; the asset becomes unusable there.

A report by Democratic staff of the US Senate Permanent Subcommittee on Investigations traces USDT through wallets it associates with the Central Bank of Iran and intermediary networks. It questions whether Tether identified and froze Iran-linked wallets quickly enough. Tether says it helped freeze approximately $550 million in Iran-linked USDT in 2026 in cooperation with US authorities. The report is a minority staff investigation, not a finding that Tether violated the law.

Iran-linked actors are seeking ways to trade despite restrictions on their access to international banking. Whether those restrictions are justified is a separate political and legal question. For this article, the revealing fact is that a digital dollar can travel across borders without a willing bank, while its issuer retains the ability to stop it at a particular address.

That combination can work better than physical dollars for both the person moving money and the investigator following it. Cash passes from hand to hand without a public record, and no issuer can remotely freeze a particular banknote. Bank transfers produce records, but those records are scattered among institutions and unavailable to the public. An on-chain USDT transfer leaves a visible path. Investigators can follow it, and Tether can freeze USDT held at identified addresses. The speed of movement and the possibility of intervention come from the same digital design.

Nor did opaque movement begin with crypto. A 1992 US Senate investigation into BCCI found that the CIA used that bank and its secretly held US subsidiary, First American, for operations even after it knew of BCCI’s misconduct. Traditional finance has long offered routes that were difficult for outsiders, and at times regulators, to see.

The blockchain’s visibility has a boundary too. It shows transfers between addresses, not the identity of every person behind them or the payment used to acquire the tokens. The Senate report relies on documents, sanctions designations and tracing to connect some wallets to people and institutions. Tether’s power to freeze becomes useful only when there is enough information to decide where to exercise it.

Control sits in more than one place

The three cases expose different powers over the same basic object. A sender can put assets into a wallet whose operator wants no part of the transaction. A compromised internal system can cause an exchange to send assets out. A token issuer can stop assets inside a wallet from moving, even when its holder wants to transact.

The ability to halt money can be a vulnerability when small unsolicited transfers disrupt an exchange, a remedy when stolen funds are frozen, and a tool of sanctions enforcement when USDT is blocked. An exchange’s operational hold and an issuer’s token blacklist are technically different. Their impact depends on who can trigger them, the evidence used and what recourse the affected holder has.

That is the hard question behind crypto wallet control. The chain records what moved and what stopped. The power to decide whether it should move is shared among senders, custodians, issuers and authorities—and the person most affected does not always get the final say.