USDC's Legal Limbo: Circle Gets Absolutely Dragged for Not Freezing $232M in Drift's Stolen Coins

After the $285 million Drift hack, the focus is shifting to Circle and whether it could have done more to stop the money. The decentralized finance ecosystem once again found itself asking the eternal question: when someone robs a bank, should the bank have noticed and maybe, just maybe, pressed the big red freeze button? Revolutionary concept, we know.

The attacker siphoned off roughly $71 million in USDC as part of the exploit, according to blockchain security firm PeckShield. After converting most of the rest of the stolen assets to USDC, the hacker used Circle's cross-chain transfer protocol (CCTP) to bridge about $232 million in USDC from Solana to Ethereum, making recovery efforts more difficult. It's almost impressive, in a deeply frustrating way—the digital equivalent of watching someone stuff suitcases with your belongings while you stand there reading the terms of service about whether you're allowed to stop them.

That movement has drawn criticism from parts of the crypto community, including prominent blockchain investigator ZachXBT, who argued Circle could have acted faster to limit the damage. The investigator didn't exactly pull punches, either. His take landed with the enthusiasm of someone who's watched one too many "we're actually a technology company, not a bank" disclaimers get deployed right before everyone's money vanishes into the void.

"Why should crypto businesses continue to build on Circle when a project with 9 figure TVL could not get support during a major incident?" he said in an X post following the attack. It's the kind of question that sounds simple but really isn't, unless you enjoy watching crypto Twitter debate the philosophical foundations of decentralized money for the next six hours.

The section header "To freeze or not to freeze" appeared here, because apparently even in financial journalism we've decided Hamlet needs to be involved.

The company had tools at its disposal, ZachXBT pointed out. Under its own terms, Circle reserves the right to blacklist addresses and freeze USDC tied to any suspicious activity. Preemptively freezing wallets linked to the exploit could have slowed or stopped the attacker's ability to move funds, one stablecoin infrastructure firm founder told CoinDesk. The irony of having superpowers you choose not to use is not lost on anyone who's ever read a comic book—or worked in compliance, apparently.

However, acting without a court order or law enforcement request might expose Circle to legal risk, the person added. Ah yes, the classic innovator's dilemma: do the right thing now, or do the legally defensible thing later and watch the hacker buy a small island. Neither option comes with a welcome packet.

Salman Banei, general counsel of tokenized asset network Plume, said freezing assets without formal authorization could expose issuers to liability if done incorrectly. He argued regulators should address that legal gap. "We need clarity," Banei essentially said, which is the diplomatic way of telling the entire regulatory apparatus to pull its weight for once in this space. Revolutionary thinking, truly.

"Lawmakers should provide a