World Liberty Financial co-founder Zak Folkman is pushing back against allegations that the Trump-backed DeFi project hid a “backdoor” function in its smart contracts. His defense is straightforward: everything was on-chain, visible to anyone who cared to look.
The person doing the looking, and not liking what he found, is Tron founder Justin Sun. Sun filed a federal lawsuit against WLF in California, alleging fraud and breach of contract over what he describes as a hidden blacklisting function embedded in the $WLFI token’s smart contract. The function, Sun claims, was used to freeze approximately $107M in tokens sitting in his wallet.
The backdoor that wasn’t hidden, or was it
Sun alleges that WLF’s smart contract for the $WLFI token contains a blacklisting function that gives the project unilateral power to freeze or seize user funds without prior notice. Folkman’s counter-argument leans on the fundamental nature of blockchain technology. Smart contracts are public code. Anyone with a block explorer and basic Solidity literacy can audit what a contract does before committing a single dollar. All functions and unlocks, Folkman says, were visible from the start.
The question isn’t whether the function existed on-chain. It’s whether investors were meaningfully informed about its implications before putting money in.
How the relationship soured
Sun wasn’t some random holder who got caught in a compliance sweep. He invested around $45M in $WLFI tokens and took on an advisory role with the project, with total capital commitments estimated at $75M.
Sun’s wallet was blacklisted in September 2025, freezing the approximately $107M in $WLFI tokens. Sun had been an advisor and major backer, and then suddenly found his tokens frozen.
WLF has asserted that any intervention using the blacklisting function is aimed at protecting users and highlights its emphasis on KYC and AML compliance. Sun’s lawsuit accuses WLF of fraud and breach of contract, alleging the project misused the blacklisting function.
The broader transparency debate
World Liberty Financial carries the Trump family name, with Eric Trump and Donald Trump Jr. involved in its management. Folkman’s defense, that on-chain code equals transparency, echoes a philosophy common in DeFi: that “code is law” and anyone interacting with a protocol has the responsibility to understand what the code does.
Including a blacklist function in a token contract isn’t inherently nefarious. USDC’s smart contract, for example, has a blacklisting function that Circle has used to comply with OFAC sanctions, and Circle’s ability to freeze funds is widely known and openly discussed in its documentation. The question for WLF is whether its communications around the $WLFI token made the blacklisting capability equally clear to investors beyond just deploying readable code.
