Is Circle failing to act on major DeFi thefts? Recently, blockchain analyst ZachXBT accused Circle of inaction while over $230 million in stolen USDC was transferred through its cross-chain infrastructure.
The incident, which originated from the Drift Protocol exploit on April 1, involved a theft estimated between $280 million and $285 million, ranking it among the largest in decentralized finance (DeFi) history. Rather than exploiting a popular smart contract flaw, the hacker gained access to Drift Protocol’s administrative permissions. This method allowed for the rapid withdrawal of assets without a trace, culminating in a total of over 100 transactions that transferred stolen funds through Circle’s Cross-Chain Transfer Protocol.
How did the Drift Protocol hack unfold? The efficiency of the attack was remarkable. The hacker utilized pre-signed transactions combined with durable nonces, enabling them to line up withdrawals to be triggered quickly. This operation took a mere 12 minutes, resulting in swift theft without anyone noticing until it was too late.
The fallout for the DRIFT token was catastrophic, plummeting by 98% from its previous high of $2.65, and trading significantly lower thereafter. The hack itself is alarming, yet what raises eyebrows is the alleged failure of Circle to take any preventive action during the six-hour window when the funds were moving.
What does Circle’s potential inaction mean for investors? USDC has a unique characteristic: Circle possesses the ability to freeze USDC in any wallet at any time. This feature is designed precisely for situations like the Drift exploit. Historically, Circle has frozen around $110 million in response to law enforcement requests. However, according to reports, Circle did not act on this occasion, despite having ample opportunity to do so while the stolen funds were being transferred.
The timing of this incident raises further questions. Just days prior to the Drift exploit, Circle had acted quickly to blacklist certain wallets under contentious circumstances. Therefore, if Circle is quick to act when motivated by other factors, it raises concerns about their motivation in this case.
Why is this situation significant for the future of stablecoins? The implications of this incident extend far beyond just one exploit. USDC is a foundational asset in DeFi, having processed an astounding $9.6 trillion in on-chain transactions in February 2025. A lack of action from the company controlling this infrastructure during such a significant theft poses questions about the reliability and integrity of USDC’s centralized control and compliance.
This incident challenges the perception of centralized stablecoins as a safety net in times of crisis. Observers worry that if Circle can freeze assets at government request but fail to act during a massive theft, the reliability of the freeze feature is called into question. This incident may have severe consequences for institutional investors, leading to a reevaluation of risk associated with centralized stablecoin models.
What is next for Drift Protocol? Recovery from such an exploit is rare, and with the significant decline in the DRIFT token, the protocol faces a bleak future. The possible inability to compensate affected users and attract new ones further complicates their recovery prospects.
Overall, the Drift Protocol incident illustrates a troubling pattern. If centralized stablecoin issuers do not leverage their powers during significant thefts, their role and reliability must be scrutinized. The implications for the industry may prompt a reassessment of decentralized alternatives and the fundamental principles behind stablecoin structures.