T3, the crypto crime-fighting unit set up by Tron, Tether and TRM Labs, was quietly wound down in late August, Bloomberg reported on 4 November, about two months before Binance’s record $6.3 billion hack put stolen-fund tracing back at the centre of the market.
MoneyTurkey Crypto Desk | 5 November 2026, 16:05 London
Key points
- T3 Financial Crime Unit was founded in September 2024 by Tron, Tether and TRM Labs; Binance joined in August 2025 through the T3+ partner programme.
- The unit was terminated in late August 2026, according to Bloomberg, citing people familiar with the matter. No shutdown was announced at the time.
- Bloomberg said the alliance broke down over slow response times and a lack of coordination among members.
- Tron, Tether and TRM confirmed the initiative had wound down; Binance declined to comment.
What happened
T3 was pitched as a fast public-private channel against illicit use of Tether’s USDT on the Tron blockchain: TRM supplied blockchain intelligence, Tron network visibility and Tether the power to freeze tokens at the issuer level.
By the unit’s own figures, it had frozen more than $250 million in illicit assets within its first year. TRM later put the tally above $300 million, and in May T3 said it had frozen more than $450 million while working with authorities in 23 jurisdictions. Those totals are the companies’ claims, not an independent count.
Bloomberg reported that the group came apart over the past year as responses slowed and members failed to coordinate. None of the firms disclosed the end of the programme until the report.
Why the timing matters
The shutdown predates the largest theft in crypto history. Binance put its 29 October loss at about $6.3 billion, and blockchain analysts have linked the attack to North Korea. Elliptic said on Thursday that most of the laundering so far has run through the Tron blockchain — the very network T3 was built to police.
The industry still froze a large share of the haul without T3. Tether said it froze more than $1.5 billion of USDT after the attack. That underlines the point: freezing power sits with the issuer, not with the alliance. What T3 offered was a single channel for police to reach the issuer, the chain and an analytics firm at once.
What firms do next
A Tron DAO spokesperson said Tron remains committed to fighting illicit activity with law enforcement and will share details of a new anti-crime initiative later. Tether said it will keep working with TRM and takes part in Beacon Network, the real-time intelligence-sharing network TRM launched in August 2025, and is also building the FASE Foundation unveiled by chief executive Paolo Ardoino on 31 October.
TRM’s Ari Redbord said T3 “achieved extraordinary things” and that Beacon Network “builds on that work.”
What to watch
- Details, membership and scope of Tron’s promised replacement initiative
- Whether Binance joins Beacon Network or any successor channel
- Further freezes and seizures tied to the Binance hack, and how much moves through Tron
- Regulator and FATF commentary on public-private crypto enforcement after T3
Related on MoneyTurkey
- Crypto movers: TRUMP Falls 15.9% as Bitcoin Slips to $78k
- Binance and Deribit Cut Off SignalPlus API Keys Over Security Scare
- Binance Says It Has Refilled 98% of Hacked Assets as Bitcoin Retakes $80,000
For information only. Not investment advice.
