Privacy coins and compliance teams rarely share the same headline. This one did.
On Thursday, blockchain investigator ZachXBT said he traced a $120 million USDT movement that included large purchases of Monero. Shortly after, Tether froze $72 million in connected funds.
The market reacted fast. Monero surged roughly 30% to an intraday high of $438 late Thursday ET, according to The Defiant’s report on the sequence of events.
What ZachXBT traced
The key claim in The Defiant’s coverage is the size and shape of the flow. ZachXBT traced a USDT movement worth $120 million. The report says the movement included large purchases of Monero, meaning at least part of the value conversion or routing involved the privacy asset.
That matters because Monero usually trades on the promise of opaque on-chain linkability. When investigators point to large buys in a laundering-linked path, they are not describing a “use case.” They are describing routing that tries to break attribution.
ZachXBT’s post is the trigger for the story. The Defiant frames the event as an investigation that then led to enforcement by Tether.
What Tether froze
The compliance step came next. The Defiant says Tether froze $72 million in connected funds.
Freezes like this do not magically reverse every step of a conversion chain. They do, however, impose friction on the parts of the flow that relied on the issuer or regulated counterparties that follow Tether’s compliance policies.
So the story is not just “privacy coin catches attention.” It is “issuer-level action hit the runway.” In a laundering attempt that uses stablecoins as the ballast, freezing a large connected chunk can break follow-through even if the original funds have already moved.
Why Monero jumped
Monero’s ~30% intraday pop looks counterintuitive if you assume bad news should weigh on the asset.
But markets often price reflexes more than nuance. A big tracer name and a big dollar figure can pull attention, liquidity, and momentum into the asset in the short window before traders price in the compliance risk.
Also, the report’s timeline matters. The surge happened after ZachXBT traced the flow and after Tether froze connected funds. That suggests the price move was driven by near-term positioning around the news cycle, not by any immediate reduction in Monero’s address-level privacy features.
In other words, the market moved on headlines first. Risk repricing usually comes after the first wave of “what happened” turns into “what changes for liquidity and usability.”
The fact pattern to watch next
This is one incident, with two moving parts: an investigator’s trace and an issuer’s freeze. The follow-up will hinge on whether more addresses or exchanges get pulled into the “connected funds” net, and whether USDT rails become less usable for similar routing.
For now, the concrete numbers in The Defiant’s report are straightforward:
| Item | Amount |
|---|---|
| USDT movement traced by ZachXBT | $120M |
| Monero purchases included in that movement | Large purchases (size not specified in excerpt) |
| Tether frozen from connected funds | $72M |
| Monero price move described | ~30% to intraday high of $438 |
What this means for privacy assets
ZachXBT’s trace and Tether’s freeze together highlight a familiar tension. Privacy can reduce attribution on-chain, but it cannot fully erase the identity layer around issuers, custodians, and stablecoin compliance.
If a significant share of a laundering attempt uses USDT, then the issuer’s reaction becomes a hard constraint. That does not guarantee the activity stops. It does raise the cost of executing flows that depend on unfrozen rails.
Meanwhile, price spikes on investigation headlines can reverse just as quickly when traders realize an event does not translate into immediate protocol changes. Assets remain volatile, and risks remain real.
For Monero holders and observers, the question is not whether Monero can be used. It is whether the on-ramps and stablecoin corridors tied to fiat and compliance get tighter after traces like this one.