Circle is facing a circle lawsuit after the Drift Protocol exploit reportedly exposed $280 million in losses and raised fresh questions about stablecoin controls.
What the complaint alleges
Investor Joshua McCollum filed the class action in a Massachusetts district court on behalf of more than 100 affected users. However, the filing says Circle executives, including former CEO John Chen, denied knowledge of stolen data and blamed other employees for delays.
The complaint argues that Circle was negligent and complicit because it allowed roughly $230 million in USDC to be unblocked for transfers during the incident. Moreover, the lawsuit says the attacker used Circle’s infrastructure over several hours to move the funds across blockchain networks.
How the transfer path unfolded
At the center of the case is cross-chain transfers through Circle’s Cross-Chain Transfer Protocol, or CCTP. The filing says the system enabled rapid movement of illicitly obtained USDC from Solana to Ethereum on the same day.
That speed mattered. After bridging to Ethereum, the funds were converted into ETH and routed through Tornado Cash, a privacy-focused mixer that made tracing harder. Blockchain analytics firm Elliptic also said the exploit may be linked to threat actors supported by North Korea.
The case therefore highlights a growing decentralized finance risk. Systems built for interoperability can also amplify damage when attackers move quickly during an active breach.
Why Circle’s freeze powers matter
The lawsuit focuses on one central question: if Circle can freeze USDC, does failing to act during an ongoing theft create legal responsibility? The company has long promoted USDC as a compliant stablecoin and has the ability to freeze assets for law enforcement or court orders.
Moreover, the plaintiffs say Circle’s alleged inaction was negligent given the size of the losses. The complaint also alleges stablecoin issuer liability under an aiding-and-abetting theory, arguing that Circle indirectly enabled the attacker to move and launder stolen funds.
The same argument could shape how courts view accountability across the crypto stack. It may also influence how centralized issuers respond when stolen assets begin to move in real time.
Prior freezes add pressure
The filing points to earlier conduct as well. Circle allegedly froze 16 unrelated wallets in a separate civil case just days before the Drift exploit.
That said, critics say the timing raises questions about consistency. If Circle had recently used its freezing tools, they ask why it did not do so during one of the largest hacks of the year.
The complaint also contrasts Circle with Tether, which reportedly froze more than $3 million tied to another exploit and publicly announced the move. The comparison has fueled debate over whether enforcement standards are being applied unevenly across stablecoins.
What it could mean for USDC
After the exploit, Drift Protocol reportedly considered replacing USDC during the situation and instead settling in USDT after relaunch. That shift could force DeFi platforms to reconsider counterparty exposure when a stablecoin issuer comes under stress.
Moreover, the episode may have lasting effects on USDC’s role in decentralized markets. Protocols evaluating stablecoin pairs are likely to focus more on responsiveness, transparency, and risk mitigation from issuers.
Circle, USDC, and the broader DeFi sector now face a test that goes beyond one exploit. The court’s ruling could help define how far issuer obligations extend when stolen funds move fast.
What the case could change
The lawsuit may set a broader standard for the industry, or it may not. If the court sides with the plaintiffs, issuers could face stronger expectations to intervene during exploits without waiting for formal orders.
However, a ruling for Circle could suggest that real-time action is not required absent legal compulsion. Either outcome would sharpen the debate over control, accountability, and the limits of decentralization in crypto markets.
In the end, the case underscores a familiar tension in digital assets: decentralized systems often depend on centralized choke points. How this dispute ends could shape crypto class action litigation and future stablecoin policy.