Circle Faces Backlash Following $285 Million Drift Hack Amid Debate Over Freezing Stolen USDC
April 3, 2026 — Circle (CRCL), the issuer of the USDC stablecoin, is facing mounting criticism after a recent $285 million hack targeting the Drift crypto protocol. The incident has reignited ongoing tensions about the role and responsibilities of regulated stablecoin issuers in responding to large-scale illicit activity on their networks.
The Drift Exploit and Stolen Funds Movement
On Wednesday, an attacker exploited a vulnerability in the Drift decentralized trading platform, siphoning off an estimated $71 million in USDC, according to blockchain security firm PeckShield. Following this initial theft, the hacker converted much of the remaining stolen assets into USDC, then leveraged Circle’s cross-chain transfer protocol (CCTP) to bridge approximately $232 million in USDC from the Solana blockchain to Ethereum. This cross-chain transfer complicated recovery efforts and spurred debate over Circle’s handling of the crisis.
Calls for Faster Action Against Illicit Transfers
Some figures in the crypto community, including prominent blockchain investigator ZachXBT, have argued that Circle could have done more—and done it faster—to limit the damage. ZachXBT questioned why crypto projects with hundreds of millions in total value locked (TVL) continue to rely on Circle when, in his view, it appeared unresponsive during a major security event.
Notably, Circle’s own terms allow it to blacklist addresses and freeze USDC tokens linked to suspicious activity. Critics contend that preemptively freezing wallets connected to the exploit could have significantly slowed or stopped the attacker from moving stolen funds across chains.
Legal Risks Cloud Decision to Freeze Assets
However, freezing assets without explicit legal authorization is legally fraught and exposes issuers to potential liability. Salman Banei, general counsel of tokenized asset network Plume, emphasized that without formal court or law enforcement mandates, such actions risk overreach and civil lawsuits. He has called for lawmakers to introduce a “safe harbor” protecting issuers who freeze assets in good faith during illicit activity.
Circle reaffirmed its cautious approach, stating, “Circle is a regulated company that complies with sanctions, law enforcement orders, and court-mandated requirements. We freeze assets when legally required, consistent with the rule of law and with strong protections for user rights and privacy.”
The Broader Challenge for Stablecoin Issuers
The Drift exploit highlights a wider dilemma faced by regulated stablecoin issuers. USDC and similar tokens have become integral components of global finance, especially for cross-border payments and crypto trading. But their programmability, which enables control and compliance, also raises concerns about discretionary intervention and due process.
In 2025, TRM Labs reported that roughly $141 billion in stablecoin transactions were linked to illicit activities such as sanctions evasion and money laundering. Security experts have pointed to likely North Korean hacker groups behind the Drift breach, underscoring the persistent threats.
Ben Levit, CEO of the stablecoin ratings agency Bluechip, noted the complexity of the situation: “This wasn’t a clean hack; it was more of a market/oracle exploit, which puts it in a gray zone. Any action by Circle becomes a judgment call, not just a compliance decision.” He stressed the need for consistent and clear policies, saying, “USDC can’t be positioned as neutral infrastructure while allowing discretionary intervention without clear rules.”
Striking the Balance Between Speed and Legality
The core tension remains striking the right balance—acting quickly to prevent illicit fund flows while respecting legal frameworks. In real-time exploit situations, decisions often have to be made within minutes, far shorter than traditional legal processes allow.
Circle’s cautious stance reflects a desire to avoid overreach while ensuring compliance. Yet, the backlash after the Drift incident highlights the growing pains as stablecoins evolve from niche tools to foundational elements of the financial ecosystem.
For ongoing coverage of crypto security and regulation, stay tuned to CoinDesk.