Circle, the issuer of USDC stablecoin, faces criticism from prominent blockchain investigator ZachXBT for failing to quickly freeze stolen USDC following the massive $285 million Drift Protocol exploit. ZachXBT alleged that faster action by Circle could have significantly limited crypto losses during the hack that occurred on April 1, 2026. However, the situation highlights the complex legal challenges surrounding asset freezing without proper legal authorization.
The controversy centers on Circle's response time and protocols for freezing compromised USDC tokens. While Circle has previously frozen USDC in cases of clear criminal activity, the company faces legal risks when freezing assets without proper authorization from law enforcement. The debate raises important questions about the balance between rapid response to protect users and adhering to legal requirements for asset freezing.
This incident adds another layer to the ongoing discussion about centralized stablecoin issuers' role in responding to DeFi exploits. The Drift Protocol hack, attributed to North Korean hackers, involved sophisticated social engineering and technical manipulation rather than a simple code exploit. The stolen funds were quickly converted to USDC and bridged to Ethereum, making Circle's response time a critical factor in potential recovery efforts. The situation underscores the need for clearer protocols and potentially faster legal frameworks for responding to major crypto thefts.
