Justin Sun alleges World Liberty Financial's USD1 stablecoin allows privileged operators to move funds from frozen wallets, raising concerns about undisclosed contract powers and transparency gaps as the project seeks U.S. trust bank approval
World Liberty Financial's USD1 stablecoin, which has received backing from Donald Trump, is under renewed scrutiny after Tron founder Justin Sun alleged that the token's live smart contract contains administrative functions not disclosed in the project's public GitHub repository. Sun claims these hidden controls allow privileged operators to move funds from user wallets that have been frozen, regardless of the holder's consent or custody setup.
Discrepancy Between Code and Contract
According to Sun, the version of USD1 currently deployed on-chain includes "drain" and "reallocate" functions that enable the contract owner to transfer funds out of frozen addresses. A technical review of the live contract confirms that "drain" can move the entire balance of a frozen wallet to the contract owner, while "reallocate" allows a specified amount to be sent from a frozen address to another address. These actions do not require approval from the affected user and cannot be prevented by cold storage or multisignature custody, since the intervention occurs at the contract level. However, these functions are only accessible to privileged roles and only apply to frozen accounts, not to all wallets at any time.
Transparency and Disclosure Gaps
The controversy centers on the fact that World Liberty Financial's public GitHub repository does not document these administrative functions. The published code shows minting, burning, freezing, and pausing capabilities, but omits the "drain," "reallocate," and V2 initializer functions present in the live contract. While the deployed contract is publicly visible on blockchain explorers, developers and investors relying on the official repository would not see the full extent of the token's administrative controls. This gap is notable because major centralized stablecoins like USDT and USDC also retain intervention rights, but typically document such powers in both code and terms of service. BitGo, which currently issues and manages USD1, states in its terms that it may freeze or upgrade the token and, in some cases, render assets permanently unusable.
Legal Dispute and Regulatory Timing
The allegations come amid a broader legal and business conflict between Sun and World Liberty Financial. Sun was an early investor in the project, but the relationship soured after World Liberty restricted his access to tokens, accused him of market manipulation, and filed a defamation lawsuit. Sun, in turn, claims to have secured a procedural win to keep his personal claims in federal court. The timing of these new technical allegations is significant, as they follow the Office of the Comptroller of the Currency's preliminary conditional approval for World Liberty Trust Company to form a national trust bank that would assume USD1 issuance and reserve management from BitGo. This development was previously covered by EgonCoin in a report on the OCC's approval and the risks facing World Liberty's DeFi-backed WLFI token, which can be found here.
Market Impact and Ongoing Questions
USD1's circulating supply has declined from a February 2026 peak above $5.3 billion to around $4 billion, according to DeFiLlama data. This reduction began before Sun's latest claims and does not appear directly linked to the contract dispute. World Liberty Financial's CEO, Zach Witkoff, disputes Sun's characterization of the legal proceedings, stating that the court has not ruled on the merits and that some claims should be handled in arbitration. The company is also seeking dismissal of Sun's personal claims. While Sun has not provided evidence that USD1 is a "rug pull" or that the administrative controls were added for fraudulent purposes, the lack of full disclosure in the public repository raises transparency concerns as the project seeks final regulatory approval for its trust bank.
Centralized stablecoins often retain the ability to freeze or move funds in response to legal or compliance requirements, but the expectation is that such powers are clearly documented and disclosed to users and developers. The USD1 case highlights the importance of aligning public code repositories with deployed smart contracts, especially as stablecoin issuers pursue regulated status and broader adoption in the U.S. market. Users and developers evaluating stablecoins should review both on-chain contract code and official documentation to understand the true scope of administrative controls and intervention rights.
