Aftermath of the May 14 Unban Wave: 497 Addresses Unfrozen, $79.2M Released

The Largest Unban in Tether History

On May 14, 2026, Tether executed what appears to be the largest single-day mass unban event in USDT history. A total of 497 addresses were removed from the blacklist across two networks:

• TRON: 447 addresses unfrozen — $71.7M USDT released
• Ethereum: 50 addresses unfrozen — $7.5M USDT released
• Combined: 497 addresses, ~$79.2M USDT returned to circulation

To put this in perspective, the previous single-day record was 28 addresses on July 15, 2025. The May 14 event was 16 times larger by address count.

All 497 addresses were originally banned in a tight 9-day window between March 24 and April 2, 2026 — then reversed in full approximately 7 weeks later. The short duration and complete reversal strongly suggest these were either erroneously flagged addresses or part of a batch correction following an investigation.

Identified Services Among the Unbanned

Several known crypto services had their wallets unfrozen during this wave. Here is what we know about each:

BingX — Centralized Exchange (Singapore)

BingX is a major centralized cryptocurrency exchange founded in 2018, serving over 20 million users across 185+ countries. It offers spot trading, derivatives, and copy trading, and is an official crypto partner of Chelsea FC.

BingX has faced several incidents: a $43-52M hot wallet hack in September 2024, and was blacklisted by India in October 2025 along with 24 other offshore exchanges over AML compliance failures. Despite these issues, the exchange remains active with a $150M Shield Fund and $300M AI investment roadmap.

Nobitex — Iran's Largest Crypto Exchange

Nobitex handles roughly 87% of Iran's crypto trading volume, allowing users to buy and sell crypto using Iranian rials.

Nobitex has been a major target of Tether's sanctions enforcement. In July 2025, it was part of a 112-wallet, ~$700M freeze of Iran-linked USDT. In April 2026, Tether froze $344M linked to Iran's Central Bank and IRGC under "Operation Economic Fury," with connections traced back to Iranian exchanges including Nobitex.

In June 2025, the pro-Israel hacking group Predatory Sparrow hacked Nobitex for over $90M, burning the funds by sending them to addresses containing "F***iRGCTerrorists." Days later, Nobitex's entire source code and infrastructure documentation were leaked, revealing modules for generating stealth addresses and logic to bypass Western compliance tools.

A Reuters investigation linked Nobitex's founders to Iran's influential Kharrazi political dynasty. Elliptic documented that Nobitex instructs users on bypassing sanctions using intermediary wallets. Despite all of this, Nobitex remains operational and is not on the OFAC SDN list.

Exnovin — Iranian Exchange

Exnovin is a Tehran-based cryptocurrency exchange founded in 2020, supporting 400+ cryptocurrencies across 12+ blockchains. It claims 1+ million active users and is available on both iOS and Android. As an Iranian exchange (requires Iranian phone number to register), it falls within the scope of Tether's Iran sanctions enforcement.

EFEX (Farhad Exchange) — Iranian Exchange

EFEX, also known as Farhad Exchange, is one of Iran's oldest cryptocurrency platforms. Founded in 2004 (originally on Yahoo Groups), it migrated to a website in 2010, added Bitcoin in 2013, and became the official WebMoney Registrar in Iran in 2016. It offers P2P trading with zero taker fees.

CCPayment — Crypto Payment Gateway (EU)

CCPayment is an EU-licensed crypto payment gateway enabling businesses to accept 900+ cryptocurrencies. It charges 0.2% per transaction, supports auto-conversion to stablecoins, and offers fiat off-ramping across 80+ countries. As a payment gateway processing USDT, its hot wallets or merchant settlement addresses may have been caught in the batch freeze.

Tronify — TRON Energy Service

Tronify is a TRON energy leasing platform that helps users rent bandwidth and energy resources to reduce transaction fees by up to 70-80%. Energy rental services exist in a gray area — they are legitimate infrastructure but can facilitate cheap transfers for anyone, including blacklisted entities.

Bika — Exchange (Defunct)

BIKA Global was a digital asset trading platform founded in April 2021 in Singapore. According to Crunchbase, the company is now permanently closed. Its wallets being unfrozen is likely a cleanup action on addresses belonging to a defunct entity.

Flauron — Gaming Platform

Virtually no public information exists about Flauron. No website, social media presence, or news coverage was found. This may be a very small or private-label project, or possibly known by a different name.

Top Unfrozen Wallets by Value

The Timing: Freeze and Unfreeze on the Same Day

What makes this event especially striking is the timing. On the exact same day (May 14), Tether published a press release celebrating their T3 Financial Crime Unit milestone: "$450 Million Frozen and Counting".

While crypto media covered the freeze milestone, 497 addresses were quietly unfrozen in the background. No press release, no announcement.

This also coincides with ongoing legal proceedings: terrorism victims are seeking a court order to force Tether to release $344M in frozen USDT linked to Iran, arguing those funds should compensate attack survivors.

Why Did Tether Mass-Unban 497 Addresses?

Tether has never publicly explained any mass unfreeze event. Based on the available evidence, several theories emerge:

1. Batch correction / false positives: All 497 addresses were banned within a 9-day window (March 24–April 2) and reversed together ~7 weeks later. This pattern is consistent with an overly broad automated sweep that was later reviewed and corrected.
2. Compliance resolution: Some services may have resolved the compliance issues that triggered the original freeze — providing KYC documentation, cooperating with investigations, or demonstrating regulatory compliance.
3. Iran sanctions recalibration: The inclusion of Iranian exchanges (Nobitex, Exnovin, EFEX) alongside non-Iranian services (BingX, CCPayment) suggests the original sweep may have used overly aggressive heuristics that flagged legitimate addresses with indirect Iranian exposure.
4. Cleanup of defunct entities: Bika (permanently closed) having wallets unfrozen suggests part of this was simply housekeeping.

What This Means for the Industry

• Freezes are not always permanent. Of the ~9,856 addresses ever blacklisted, approximately 744 (7.5%) have been subsequently unfrozen.
• Tether makes mistakes. A 497-address reversal within 7 weeks strongly implies the original freeze was overly broad.
• There is no transparency. Neither the original batch freeze nor the mass unfreeze received any public disclosure from Tether.
• On-chain monitoring is essential. Without tools like USDTBanList Event Tracker, events like this go completely unnoticed.

Track It Live

Monitor all freeze, unfreeze, and burn events in real-time on our Event Tracker. Filter by "Unfreeze" to see all unban events, or check specific addresses for their full history.

Data source: on-chain events from Ethereum and TRON blockchains, tracked by USDTBanList.

References: Tether T3 FCU Report · CoinDesk · Elliptic · CoinTelegraph