The scariest scenario in crypto isn’t a market crash. It’s someone minting unlimited stablecoins. A new report has found that a two-key breach of Tether’s smart contract infrastructure could give hackers effective control over $91 billion worth of USDT, the stablecoin that underpins most of the crypto market’s liquidity.
With USDT circulation exceeding $180 billion, the finding puts a spotlight on a structural vulnerability that most traders never think about: the centralized keys that make Tether’s decentralized-sounding system actually work.
How the keys work, and why they matter
Tether’s smart contracts include administrative functions that allow the company to mint new tokens, burn existing ones, and blacklist specific wallet addresses. These functions are controlled by cryptographic keys held by the company. The report suggests that compromising just two of these keys could grant an attacker the ability to perform unauthorized actions, including minting massive quantities of new USDT, with a potential blast radius covering roughly half of USDT’s total supply.
To date, there have been no known incidents of Tether’s key infrastructure being compromised.
Quantum computing adds a ticking clock
Experts flagged in August 2026 that Tether’s minting keys represent high-value targets for future quantum attacks, with some estimating a 50% probability of such attacks becoming feasible by 2028. Experts have suggested a quantum attack could manifest as unexplained on-chain movements, subtle enough to evade detection until significant damage is done.
Tether’s centralized power: feature or bug?
The company has coordinated freezes totaling over $4.2 billion linked to illicit activities. Historically, over $5.8 billion in value has been frozen across various periods.
In a lawsuit filed in August 2026, two Thai businessmen alleged that Tether froze approximately $42.4 million in USDT following an informal law enforcement request, without an initial warrant. The freeze reportedly originated from a request made in October 2025.
Tether completed a full KPMG audit of its finances in August 2026, a move aimed at reinforcing credibility amid persistent scrutiny. The audit addressed questions about reserve backing, though it doesn’t directly speak to the smart contract key management risks highlighted in the new report.
What a breach would mean for the broader market
USDT serves as the dominant trading pair on most exchanges, provides liquidity across decentralized finance protocols, and acts as the de facto dollar substitute in regions with limited banking access. A breach that allowed unauthorized minting would undermine the fundamental promise of USDT: that each token is backed by reserves. If an attacker created billions in unbacked USDT and dispersed it across exchanges, the resulting sell pressure and loss of confidence could trigger a market-wide liquidity crisis.
The 2022 TerraUSD implosion, which erased roughly $40 billion in value, offers a rough template for what a stablecoin failure looks like, and USDT is several times larger than UST ever was.