Circle Hits Freeze on Casinos But Lets $285M in Hot USDC Party-Hop to Ethereum

Onchain detective ZachXBT is roasting Circle like it’s amateur hour at a degen poker table, accusing the stablecoin giant of selective vision so bad it could qualify as a medical condition. The crime? Standing by while $285 million in pilfered USDC casually strolled through Circle’s very own Cross-Chain Transfer Protocol after the Drift Protocol heist—because apparently, firewalls are for tax receipts, not stolen millions.

April 1 wasn’t just Fool’s Day for Drift Protocol—it was liquidation day. The exploit siphoned the entirety of its main vault, clocking in as the biggest DeFi rug-pull-by-hacker in 2026. No fireworks, no warning, just a cold, clinical drain that wiped over half of Drift’s TVL. The kind of move that makes your smart contract feel personally betrayed.

The hacker didn’t even break a sweat. They leisurely shuffled the stolen assets across wallets like a high-roller flipping chips, holding USDC for a cool 1–3 hours before casually bridging from Solana to Ethereum via Circle’s CCTP—peak U.S. business hours, no less. It was less “covert op” and more “open invitation,” with Circle serving hors d'oeuvres and a welcome mat.

Still, no freeze. Not a peep. Circle’s compliance team might as well have been on a beach in Bali, sipping mojitos while the exploit funds did the limbo under their watch.

Specter, the onchain Sherlock, noted the attacker’s clean playbook: zero swaps to USDT, zero panic. They went full USDC all the way through the bridge. Either they had insider intel or they just really trust Circle’s “immutable” infrastructure—which, ironically, isn’t very immutable when the lawyers call.

And speaking of lawyers: just days before this crypto car crash, Circle froze 16 unrelated business wallets in a sealed civil case. Boom—casinos, exchanges, payment rails all locked up like a staked LP position. ZachXBT called it the most botched freeze since Tether accidentally blacklisted a dog groomer. One wallet linked to Goated.com eventually got thawed, but the rest? Still frozen in carbonite, Han Solo–style.

The contrast is so sharp it could slice a BRC-20 in half. Circle nukes wallets for online poker sites over legal whispers, but when six-figure millions of stolen USDC go on a cross-chain vacation? Crickets. It’s like calling the cops on your neighbor’s loud party while ignoring the armored truck backing up to your own vault.

Circle’s staying silent, which in crypto is basically a confession with a non-disclosure agreement. Meanwhile, on Ethereum, the stolen loot morphed into roughly 129,000 ETH—because nothing says “clean getaway” like a full convert to the native fuel of the world computer. Drift’s TVL plunged from $550M to $247M, and its DRIFT token tanked 28%, trading now at “hopeful comeback” levels usually reserved for meme coins with cartoon frogs.

The old stablecoin debate just got a fresh coat of paint: can a centralized issuer really claim moral authority over freeze powers when they’re wielded like a clown hammer—smashing the small stuff while missing the jackpot robbery? The degen crowd isn’t buying it. And neither is ZachXBT.