Tether's USDT has received an upgraded rating from stablecoin assessor BlueChip, but a parallel security review by blockchain firm Hacken has flagged a serious vulnerability: control over roughly $91 billion in tokens could theoretically be seized if just two private keys were compromised.
A Rating Upgrade With a Catch
The world's largest stablecoin issuer earned improved marks under BlueChip's new evaluation framework, which blends traditional Wall Street–style financial auditing with Web3-native code analysis. The dual approach is designed to scrutinize both the off-chain reserves backing the token and the on-chain smart contracts that govern it.
While the upgraded score reflects growing confidence in Tether's reserve backing and transparency efforts, the accompanying technical audit painted a more cautionary picture of how the stablecoin's infrastructure is administered.
Billions of dollars in value can hinge on the security of just a handful of cryptographic keys.
The Two-Key Weakness
Hacken's review identified that administrative authority over a significant portion of USDT is concentrated in a small number of signing keys. According to the report, a breach of just two of those keys could hand attackers the ability to manipulate an estimated $91 billion in tokens.
Such a concentration of control represents a classic single point of failure. When the power to mint, freeze, or otherwise alter a massive token supply rests on a minimal set of credentials, the attack surface for a devastating exploit narrows to a dangerously small target.
Why the Combined Approach Matters
The findings underscore why evaluators are increasingly pairing financial audits with deep technical reviews. A stablecoin can maintain fully backed reserves yet still expose holders to catastrophic risk if its operational security is weak.
Key takeaways from the assessment include:
- Reserve backing and transparency earned Tether a higher rating.
- On-chain administrative controls remain a notable weak point.
- Concentrated key management could enable large-scale manipulation if exploited.
For an issuer whose token underpins much of the crypto trading ecosystem, the report serves as a reminder that trust in a stablecoin depends as much on airtight security engineering as it does on the assets held in reserve.