Circle's Freeze Button Collecting Dust? ZachXBT's 'Circle Files' Expose $420M in Alleged Compliance Whiffs

On-chain investigator ZachXBT has released what he's calling the 'Circle Files,' detailing alleged compliance failures by USDC issuer Circle involving over $420 million since 2022. The document reads less like a quarterly earnings report and more like a "Wanted" poster that Circle keeps accidentally leaving face-up on the printer.

The report highlights 15 crypto hacks where Circle took minimal action against illicit funds. The list includes the Bybit exploit—the largest crypto hack in history—where Circle allegedly took 24 hours longer than Tether to freeze 338,000 USDC at risk, despite requests from law enforcement, Bybit, and private-sector experts. Apparently when it comes to emergency fund freezes, Circle moves with the urgency of a Tuesday afternoon standup meeting.

The Drift Protocol exploit serves as the latest example. ZachXBT notes that the attacker used Circle's native bridge (CCTP) to transfer over $232 million in USDC from Solana to Ethereum across more than 100 transactions over six consecutive hours. According to the report, Circle failed to freeze any of these funds during that window. Six hours. That's approximately 12 crypto Twitter meltdown threads, four "wen lambo" posts, and one full sleep cycle—yet somehow not enough time to press a button.

ZachXBT pointed out that Circle's own terms reserve the right to block addresses linked to illegal activity, and its token contract includes a freeze/blacklist function—meaning the capability exists. The investigator summarized: "They have every tool and resource available to do better. They just haven't." It's the crypto equivalent of owning a fire extinguisher, watching your kitchen go up in flames, and posting a thoughtful thread about the incident afterward.

The $420 million figure covers major public cases only, with ZachXBT suggesting the actual total is likely significantly higher. Because nothing says "we take compliance seriously" quite like a number that probably just scratches the surface.