Woofun AI reports that the Trump-backed USD1 stablecoin is facing intense scrutiny after developer Sun alleged the existence of hidden administrative powers within the token's smart contract, powers that are not reflected in World Liberty Financial's (WLFI) public GitHub repository.

Sun argues that the live implementation of USD1 possesses privileged functions capable of altering balances even after an address has been frozen, rendering traditional security measures like cold storage or multisignature custody ineffective at the token-contract level. He claims the issuer can move USD1 out of a user's account into its own wallet or that of any arbitrary user without consent, operating solely on frozen balances. Sun asserts that these controls were added post-deployment, similar to modifications he alleges were made to the WLFI token, stating that "nothing you do can stop it" because the authority resides at the contract level rather than the wallet level.

While these functions do not allow unrestricted transfers from active wallets or grant arbitrary users access to others' funds, they sit behind privileged permissions that override user custody setups once an address is frozen. The core of the technical dispute lies in this discrepancy between the deployed contract code and the World Liberty's published repository, which fails to display the full set of administrative powers currently governing USD1. Although the existence of such centralized controls is not unprecedented in the industry, the failure of World Liberty's public repository to keep pace with its deployed contract raises significant transparency questions for developers and investors relying on open-source verification.

Sun expanded his accusations to suggest that this mismatch constitutes evidence of fraudulent deployment, comparing the pattern to techniques used in crypto rug pulls and alleging that World Liberty had previously employed a similar approach with WLFI. He contends that anyone in the crypto space recognizes this pattern as a red flag for malicious intent, implying that the gap between the published code and the live contract is deliberate.

However, available evidence does not establish that World Liberty deliberately kept its repository outdated to mislead users or auditors, nor does the code discrepancy indicate a reserve shortfall, impaired backing, or unauthorized movement of USD1 from holder accounts. The timing of these revelations has nonetheless raised the stakes for World Liberty, as the project pursues final bank approval while its flagship stablecoin trades below its recent peak. Although the decline in USD1's value began before Sun's latest allegations and does not directly link holders redeeming due to the contract dispute, the situation leaves World Liberty in a precarious position, seeking regulatory validation while facing public contention over its technical governance.

The dispute ultimately centers on a narrower technical issue than Sun's rhetoric suggests, as he has not proven that USD1 is a rug pull or that administrative controls were added for fraudulent purposes. What remains harder to dismiss is the disclosure gap: USD1's live contract contains powers that World Liberty's own public repository does not fully reflect, just as the company seeks final approval for a regulated trust bank that would eventually oversee the stablecoin.