Stablecoin Freeze Requirements: MAS, HKMA and the GENIUS Act
Quick answer. All three expect issuers to be able to stop specific tokens moving. The GENIUS Act requires it from January 18, 2027, Hong Kong's HKMA guidelines already govern freezes, and Singapore's MAS has only proposed it.
Video transcript
All three markets expect stablecoin issuers to stop specific tokens moving. The rules differ in force, and who can press the freeze button is being written into supervisory texts.
The GENIUS Act is law, effective January 2027, and requires capability to comply with lawful orders. Hong Kong's HKMA guidelines already apply. Singapore's MAS has only proposed trace, freeze or burn capability.
Hong Kong is the most specific. Each operation needs its own authorization level, and no single party can perform high-risk ones. Contracts must be audited at least yearly and on every upgrade.
The hard part is speed against control. A freeze only helps if it lands before the funds move, so the freezing quorum must be reachable at any hour.
Guardian's design separates powers by risk. A narrow freezer role acts fast. Burning, minting, role changes and upgrades sit behind higher thresholds, separate signers or timelocks.
A freeze is only as good as the paths it covers. Test transfers, old allowances, signed permits, bridge sends and redemption, on every chain.
Live coins differ. USDT puts every power behind one three of six multisig. USDC splits roles across four addresses. Paxos tokens had one address holding admin, pause and asset protection.
Read the full article for the provision by provision mapping. Or talk to Guardian about testing your freeze and role design.
Who can press the freeze button, and how fast, is being written into supervisory texts. An issuer licensed in several markets needs one role design built to the strictest reading of each.
This article explains the technical and security side of these three texts. It is not legal advice; confirm how it applies to you with counsel.
Three Texts Side by Side
| United States | Hong Kong | Singapore | |
|---|---|---|---|
| Text | GENIUS Act | HKMA guidelines | MAS P015-2026 |
| Status | Law; takes effect January 18, 2027 | In force since August 1, 2025 | Proposal; consultation closed October 16, 2026 |
| Capability | Seize, freeze, burn or prevent transfer; block, freeze and reject | Every lifecycle operation, including blacklist, freeze, burn and pause | Trace, freeze and/or burn |
| Trigger | Lawful order; transactions that violate federal or state law | Regulator, law enforcement or court requests | Use for or in support of illicit activities |
| Role governance | Segregation of duties and dual controls (OCC rule) | Authorization level per operation; no single party for high-risk ones | Existing technology risk rules; specifics pending |
| Audit | Smart contracts validated; periodic independent testing (OCC rule) | Third-party audit at least yearly and on every deployment or upgrade | Not yet specified |
One detail shapes the engineering: a seizure can need a mint. Treasury's August 18, 2026 proposal recognizes that a lawful order "may additionally require reissuance of the payment stablecoin".
What Each Text Says
United States
Section 2(16) of the GENIUS Act defines a lawful order as a "final and valid" order under federal law, from a court or authorized federal agency.
Section 4(a)(6)(B) lets an issuer issue only if it has the technological capability to comply, and will comply, with lawful orders.
Section 4(a)(5)(A)(iv) adds capabilities to block, freeze and reject transactions that violate federal or state law.
FinCEN and OFAC proposed implementing rules on April 10, 2026, extending both duties to secondary market activity.
Foreign issuers face the same test through the exchanges that list them, as our post on whether USDT is GENIUS Act compliant explains.
Hong Kong
Paragraph 5.10 of the HKMA's AML/CFT guideline lists example measures. One is "freezing the stablecoin promptly upon receiving requests from regulators or law enforcement agencies, or court orders".
Paragraph 5.11 says their effectiveness "is yet to be proven". Unless a licensee can show the HKMA they are effective, "the identity of each individual stablecoin holder should be verified".
Paragraph 8.6 gives freezing or burning on law enforcement requests as an example of risk mitigation after a suspicious transaction report.
Singapore
Paragraph 3.22 of MAS's paper proposes "technical capabilities to trace, freeze and/or burn the issued stablecoins if found to be used for or in support of illicit activities".
Specific requirements will follow in a Notice.
Who Can Press the Button
Hong Kong is the most specific. Paragraph 6.5.3 of the supervision guideline requires an authorization level proportionate to risk for each token operation, from mint and burn to blacklist and freeze.
High-risk operations must be designed so no single party can perform them unilaterally, for example by multi-signature.
Where applicable, it expects extra measures such as timelocks, velocity limits and simulation of signed transactions.
Paragraph 6.5.4 says no staff member should be able to take "full control over role management".
Paragraph 6.5.7 requires air-gapped generation and storage for keys that deploy, upgrade, manage roles or make large mints or burns.
In the US, the OCC's final rule for its issuers requires "appropriate segregation of duties and dual controls" and private key management (12 CFR 15.13). It prescribes no signing scheme.
The hard part is speed against control. A freeze only helps if it lands before the funds move, so the freezing quorum must be reachable at any hour.
One Role Design for All Three
The design below separates powers by risk: the fast action is narrow, and the destructive ones are slow.
| Role | Can do | Control | Answers |
|---|---|---|---|
| Freezer | Freeze or blacklist addresses, singly or in batches | Low threshold multisig, staffed around the clock, no timelock | GENIUS 4(a)(5) and 4(a)(6); HKMA AML 5.10; MAS 3.22 |
| Asset protection | Unfreeze; burn the balance of a frozen address | Higher threshold, separate signers, order reference recorded | Lawful order burn; HKMA AML 8.6; MAS burn |
| Minter | Mint, including reissuance under a seizure order | Per-minter allowance, velocity limits, whitelisted recipients | Treasury reissuance proposal; HKMA 6.5.3 |
| Role admin | Grant and revoke every role above | Highest threshold, timelock, air-gapped keys | HKMA 6.5.4 and 6.5.7; OCC dual controls |
| Upgrader | Change the implementation | Timelock, audit before every upgrade | HKMA 6.5.5; OCC 15.13(b)(3) |
A freeze is only as good as the paths it covers. Test that a frozen address cannot move value through:
transferandtransferFrom, as sender, recipient or spender- old allowances,
permitand signed-authorization transfers - bridge or omnichain sends, and receipts on the destination chain
- redemption, burn and wrapper contracts
- mints to the frozen address
- every other chain and version of the token
Our guides to foreign stablecoin due diligence and multichain deployment verification show how to check this before listing and on every chain.
What Live Stablecoins Do Today
We read each token's verified source on Sourcify, and Ethereum mainnet state over public JSON-RPC at block 26,343,077 on November 4, 2026.
"No contract code" means eth_getCode returned nothing for that address at that block.
USDT (TetherToken). Freeze: addBlackList and removeBlackList. Burn: destroyBlackFunds, only for blacklisted addresses.
- One owner role holds blacklist, burn, pause, issue and redeem.
- The owner was a legacy MultiSigWallet contract (not a Safe).
- It required 3 confirmations from 6 owner addresses, none with contract code.
- The wallet has no timelock.
USDC (FiatToken v2.2). Freeze: blacklist and unBlacklist, by a blacklister role. No function burns a frozen balance; minters can burn only their own balance.
- Blacklister, pauser, owner and proxy admin (which can upgrade the contract) were four different addresses.
- None of the four had contract code.
- The master minter was a contract.
PYUSD and USDP (PaxosTokenV2). Freeze: freeze, unfreeze and batch versions, by an asset protection role. Burn: wipeFrozenAddress, only for frozen addresses.
- Asset protection and pause are separate roles in the code.
- But on both tokens, one address with no contract code held both, plus the default admin role.
- The proxy admin was another address with no contract code.
- Every supply controller had a mint rate limit set.
We did not enumerate every holder of the Paxos roles, because the contract does not list them.
The chain cannot show whether an address with no contract code is backed by a hardware security module or threshold signing. So none of these is wrong on its face.
But each would evidence the HKMA's no-single-party test differently.
USDT puts every power behind one 3-of-6 quorum that executes as soon as the third confirmation lands.
USDC splits its roles across separate addresses, so the evidence for each is the offchain signing control behind it.
How Guardian Helps
Guardian's smart contract audits start with a design review of governance, roles and upgrade paths, then attack privileged flows directly.
Our regulatory assessments map each privileged role, read from the deployed contracts, to HKMA paragraphs 6.5.3 and 6.5.4 and GENIUS section 4(a)(6).
For USAT, Tether's US-regulated stablecoin, we matched bytecode byte-exact on Ethereum mainnet and Sepolia. We ran a 62-test fork suite over its blocklist, permit, mint and redeem paths.
More in the USDT0 client story and our stablecoin regulation guide.
Frequently Asked Questions
Does the GENIUS Act require a stablecoin freeze function?
Yes, in substance. An issuer may issue only if it has the technological capability to comply with lawful orders to seize, freeze, burn or prevent transfer. It also needs capabilities to block, freeze and reject impermissible transactions.
Does Hong Kong require stablecoin issuers to freeze tokens?
The HKMA guidelines require an authorization level for freeze, blacklist and other operations, with no single party able to perform high-risk ones. Prompt freezing on regulator, law enforcement or court requests is listed as an example measure.
Can one person or one key hold the freeze role?
Hong Kong requires high-risk operations to be designed so no single party can perform them, and the OCC requires dual controls. If one onchain address holds a high-risk role, expect to evidence the offchain controls behind it.
Sources
- GovInfo: Public Law 119-27, the GENIUS Act (July 18, 2025)
- Federal Register: FinCEN and OFAC, Permitted Payment Stablecoin Issuer AML/CFT Program and Sanctions Compliance Program Requirements, proposed rule (April 10, 2026)
- Federal Register: Treasury, GENIUS Act Regulations on Payment Stablecoin Issuance, Offer, and Sale, proposed rule (August 18, 2026)
- Federal Register: OCC, Implementing the GENIUS Act for the Issuance of Stablecoins by Entities Subject to the Jurisdiction of the OCC, final rule (October 23, 2026)
- HKMA: Guideline on Supervision of Licensed Stablecoin Issuers (August 2025)
- HKMA: Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Stablecoin Issuers) (August 2025)
- HKMA: Implementation of regulatory regime for stablecoin issuers (July 29, 2025)
- MAS: Consultation on Proposed Amendments to the Payment Services Act for Stablecoin Regulation, P015-2026 (September 1, 2026)
- Sourcify: TetherToken verified source, Ethereum 0xdAC17F958D2ee523a2206206994597C13D831ec7
- Sourcify: MultiSigWallet verified source, Ethereum 0xC6CDE7C39eB2f0F0095F41570af89eFC2C1Ea828 (USDT owner)
- Sourcify: FiatTokenV2_2 verified source, Ethereum 0x43506849D7C04F9138D1A2050bbF3A0c054402dd (USDC implementation)
- Sourcify: PYUSD (PaxosTokenV2) verified source, Ethereum 0x8c35caa5fd5bdc64b6b11344ad57594a3676256a (PYUSD implementation)
- Circle: stablecoin-evm (FiatToken) repository
- Paxos: paxos-token-contracts repository
- Guardian: USDT0 client story
Test your freeze before a regulator does
Guardian reviews your token's freeze, burn and role design, tests the transfer paths a freeze has to cover, and maps the result to the provisions it answers.