Circle Faces Backlash After $285 Million Drift Hack – Could They Have Done More?

by

Finance

What to know:

  • After exploiting the crypto protocol Drift, the attacker moved about $232 million in USDC from Solana to Ethereum using Circle’s cross-chain transfer protocol.
  • Critics like blockchain investigator ZachXBT said Circle could have moved faster to blacklist wallets and freeze funds. But freezing assets without authorization could carry legal liability, Plume general counsel said.
  • Circle said it freezes assets when legally required, highlighting a growing tension for regulated issuers between acting quickly to curb illicit flows and avoiding overreach without court or law enforcement orders.

After the $285 million Drift hack, everyone’s attention is now on Circle (CRCL), wondering, “Could they have done more to stop the money from flying out the door?”

The attacker managed to siphon off about $71 million in USDC during the exploit on Wednesday, according to PeckShield, the crypto watchdogs. After most of the stolen assets were converted into USDC (because who doesn’t love a little stablecoin action?), the hacker then used Circle’s cross-chain transfer protocol (CCTP) to move a whopping $232 million from Solana to Ethereum. Guess what? That made recovery efforts harder than finding a needle in a haystack during an earthquake.

So, naturally, the crypto community erupted. Enter ZachXBT, the blockchain detective extraordinaire, who pointed out that Circle could have been quicker to freeze those wallets and prevent a further disaster.

“Why should anyone trust Circle when a project with a 9-figure total value locked couldn’t get any love during a major hack?” he posted on X, probably sipping some of that sweet blockchain skepticism.

To Freeze or Not to Freeze?

Circle had the power to take action, ZachXBT said. According to their own guidelines, Circle can blacklist addresses and freeze USDC if they suspect something shady is going on.

If Circle had pulled the trigger earlier, freezing the wallets associated with the hack, maybe the attacker’s ability to shuffle around funds would’ve been put on ice. That would have slowed things down-or at least made the hacker break a sweat.

But hold your horses! Freezing assets without a court order or law enforcement request? Oh, that could open a whole can of legal worms, and no one wants that. Some say Circle was just trying to avoid a legal lawsuit buffet.

Salman Banei, the legal mastermind over at Plume, warned that freezing assets without a green light could expose Circle to liability. He believes lawmakers should step in and give digital asset issuers a safe space to make judgment calls without worrying about a lawsuit looming over their heads.

Circle, ever the cautious player, responded with its favorite mantra: “We freeze assets when legally required.” They’re regulated, folks, so they’re all about the rule of law and, of course, user privacy. No room for mistakes there!

The ‘Gray Zone’ of Crypto

This whole fiasco also highlights a deeper issue that’s been simmering in the crypto world like a bad casserole-stablecoins. USDC, in particular, has become a core part of global money flows, especially for cross-border payments. But when things go wrong, everyone looks at the issuers to “do something.”

TRM Labs, the crypto clairvoyants, estimated that a stunning $141 billion in stablecoin transactions in 2025 were connected to illicit activity. Looks like someone forgot to tell the hackers that stablecoins aren’t for robbing banks. Oops!

Some blockchain security experts even suspect North Korean hackers were behind the Drift exploit. Surprise, surprise. Nothing shady going on there…

But the plot thickens. Stablecoins like USDC, while useful for stopping illegal transfers, also make issuers question where to draw the line between stopping bad guys and, you know, crossing into Big Brother territory.

Ben Levit, the CEO of Bluechip (yes, that’s the name), said the situation isn’t so black and white. “This wasn’t a clean hack; it was more of a market/oracle exploit, which puts it in a gray zone.” Translation: It’s like trying to decide whether to call a foul in soccer or let it slide. Complicated, right?

So now we’re stuck with the age-old problem: Move too slow and get roasted by critics for enabling bad actors. Move too fast without legal backing and become the villain in the story. Either way, you’re in a bit of a pickle.

And when it comes to fast-moving exploits? Forget weeks or months of legal battles; we’re talking minutes to make a decision. Tick-tock.

Read More

2026-04-03 22:17