According to CoinMeta, blockchain security company Hacken pointed out that USDT worth $91.3 billion on the Tron network is controlled by a multi-signature contract involving 2–of-3 parties. Those holding both signature keys can take over the contract management rights, and the contract lacks mechanisms for delays, cancellations, or revocations. Attackers can change the contract owners, thereby minting USDT, freezing addresses, destroying balances, or collecting transaction fees. This multi-signature wallet controls the USDT contract itself, rather than directly holding users' funds.