Report: $91.3B USDT on Tron Controlled by 2-of-3 Multisig; Two Compromised Keys Could Seize Contract Authority

September 7 news, blockchain security firm Hacken's assessment found that approximately $91.3 billion USDT on the Tron network (about half of the circulating supply) is controlled by a single contract, and anyone holding two signing keys could take over its management authority, with no built-in delay, cancellation window, or revocation mechanism in the contract. Hacken auditors stated that an attacker could first change the contract owner, then mint USDT, freeze addresses, destroy frozen balances, or charge transfer fees, without needing access to user wallets. This multisig wallet does not hold user funds, but it controls the USDT contract itself—that is, the power to mint tokens, freeze addresses, and reassign ownership.