The cryptocurrency world faced yet another security crisis on November 19, 2017, when Tether, the company behind the USDT stablecoin pegged to the US dollar, announced that $30,950,010 worth of its tokens had been stolen from its treasury wallet. The breach sent immediate shockwaves through crypto markets and forced an unprecedented emergency response that included a blockchain fork and trading freezes across major exchanges.
TL;DR
- $30,950,010 USDT stolen from Tether Treasury wallet on November 19, 2017
- Tether released emergency OmniCore software update to freeze stolen funds
- Exchanges including Huobi and OKCoin immediately suspended USDT trading
- Bitcoin was trading at approximately $8,036 at the time of the breach
- The stolen tokens were sent to bitcoin address 16tg2RJuEPtZooy18Wxn2me2RhUdC94N7r
The Attack and Immediate Discovery
Tether discovered the breach on November 20, 2017, revealing that the theft had occurred the previous day. According to the company’s critical announcement, the stolen USDT tokens were transferred to an unauthorized bitcoin address in a single transaction. The attacker exploited what Tether described as a brief security loophole in its system, allowing external access to the treasury wallet.
The stolen funds were traced to bitcoin address 16tg2RJuEPtZooy18Wxn2me2RhUdC94N7r. Tether immediately warned the broader crypto community not to accept any tokens originating from this address, declaring that they would not be redeemable for any currency.
Emergency OmniCore Fork
In a dramatic technical response, Tether released an updated version of its OmniCore software — version 0.2.99.s — designed specifically to prevent the movement of stolen coins from the attacker’s address. This effectively created a hard fork of the Omni layer, essentially freezing the stolen tokens at the protocol level.
Tether urged all exchanges, wallets, and integration partners to install the updated software immediately to prevent potential losses. The company also announced it was working with the Omni Foundation to investigate methods for reclaiming the stranded tokens and addressing the hard fork created by the emergency update.
Exchanges React With Trading Freezes
The response from major cryptocurrency exchanges was swift. Huobi and OKCoin both moved to suspend Tether deposit and withdrawal services as a precautionary measure. The exchanges stated they would not resume USDT trading until receiving confirmation from Tether that the stolen tokens could not re-enter the broader market.
This was particularly significant given Tether’s central role in the cryptocurrency trading ecosystem. At the time, USDT was the primary stablecoin used by traders on non-USD-compliant exchanges like Bitfinex, Bittrex, and Poloniex to settle accounts and move in and out of positions during periods of volatility.
A Troubling Pattern for iFinex
The Tether hack marked the second major security incident involving the iFinex group, the parent company of both Tether and the Bitfinex exchange. In August 2016, Bitfinex suffered a devastating breach in which more than $60 million worth of bitcoin was stolen. The recurrence of security failures at related entities raised serious questions about the operational security practices within the broader Bitfinex-Tether ecosystem.
At the time of the hack, Bitcoin was trading at approximately $8,036, with the total cryptocurrency market capitalization exceeding $240 billion. Ethereum sat at $354, while Bitcoin Cash traded near $1,172. Despite the breach, broader market prices remained relatively stable, though the incident intensified ongoing debates about Tether’s transparency and its role in cryptocurrency price dynamics.
Why This Matters
The Tether hack of November 2017 was a watershed moment for the stablecoin industry. It exposed the fragility of even the most fundamental crypto infrastructure and forced the industry to confront difficult questions about security, transparency, and trust. The emergency blockchain fork set a precedent for how stablecoin issuers might respond to catastrophic breaches — a playbook that would be referenced in numerous incidents in the years that followed. The hack also fueled growing scrutiny of Tether’s operations, its relationship with Bitfinex, and whether USDT reserves were genuinely backed 1:1 by US dollars, debates that would continue to shape the crypto regulatory landscape for years to come.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry significant risk. Always conduct your own research before making investment decisions.