USD1 contract has admin reallocation powers missing from GitHub
Deployed USD1 smart contract includes functions that let privileged operators move tokens from frozen wallets; those functions are not in World Liberty Financial’s public GitHub.
A review of on-chain code shows the deployed USD1 smart contract includes functions that allow privileged operators to transfer tokens out of frozen wallets. Those functions do not appear in the project’s public GitHub repository, a discrepancy flagged by Justin Sun on August 21, 2026 and verifiable on the blockchain.
The functions extend beyond standard freeze and blacklist tools by permitting reallocation of a frozen balance from one address to another rather than merely locking it in place. The repository World Liberty Financial maintains as its public reference does not include the reallocation functions found on the live contract.
World Liberty received conditional preliminary approval from the Office of the Comptroller of the Currency on August 14, 2026 to form a national trust bank that would issue USD1 and hold its reserves; final OCC approval is still pending. It is not publicly known whether OCC reviewers examined contract-level administrative controls during the conditional approval process.
The technical finding appears amid active litigation between Justin Sun and World Liberty. Sun filed a suit on April 21, 2026 in the Northern District of California over roughly 2.9 billion WLFI tokens frozen in September 2025, alleging fraud, breach of contract and unjust enrichment. World Liberty rejects those claims, has filed counterclaims, and brought a defamation action in May 2026 in Miami-Dade County.
On August 20, 2026 a California federal judge ruled that Sun’s individual claims will proceed in open court rather than in private arbitration. Separately, World Liberty has previously used freezing powers: in June 2026 it froze wallets linked to the HTX exchange, which led HTX to delist USD1 and convert user balances to USDT.
World Liberty’s public disclosures state the company can block or freeze wallet addresses and associated tokens when it determines they are linked to illegal activity or violations of its terms. The company has said Sun agreed to that freezing authority under an agreement governing his tokens.
Major fiat-backed stablecoins maintain centralized administrative functions such as freeze and blacklist capabilities. The on-chain finding here is the presence of a reallocation function and a mismatch between deployed code and the published repository. On-chain verification confirms the presence of the function and the repository omission. There is no public evidence that any frozen funds have been moved without consent, and no court has ruled on the underlying disputes. Final OCC approval remains pending.








