Circle’s $420 Million Compliance Gap: Drift Hack Sparks Criticism

- Researcher ZachXBT alleges Circle delays led to $420 million in losses since 2022. - Six-hour response to Drift Protocol hack allegedly allowed laundering of $232 million in USDC. On April 1, 2026, a post on X (formerly Twitter) by on-chain researcher ZachXBT accused Circle, the issuer of the USDC stablecoin, of failing to promptly mitigate losses from major cryptocurrency hacks, resulting in over $420 million in stolen funds since 2022. The post highlighted several incidents where Circle’s response time allegedly fell short compared to Tether's, intensifying scrutiny over how centralized stablecoin issuers address exploit damages. A key example cited was the hack of Drift Protocol, a Solana-based DeFi platform, where attackers stole and laundered $232 million in USDC using Circle’s Cross-Chain Transfer Protocol (CCTP). According to the researcher, Circle delayed freezing the USDC for six hours, which allowed the attackers to move the stolen funds. In contrast, Tether reportedly intervened swiftly and froze the associated USDT within 90 minutes. ZachXBT argued that Circle’s slower action enabled the laundering of a large portion of the stolen funds before any freeze occurred. In addition, ZachXBT pointed to 15 separate incidents between 2022 and 2026 where Circle allegedly failed to act swiftly. The investigation highlighted several major exploits, including the Mango Markets exploit, which involved $57.5 million in unfrozen USDC, and the Nomad Bridge hack in August 2022, where $45 million remained unlocked. Furthermore, following the Cetus Protocol breach in May 2025, a delay from Circle in blacklisting wallets tied to a $200 million hack allegedly enabled the attackers to convert stolen USDC to Ether. These repeated patterns call Circle’s responsiveness to security threats into question. In a public statement on April 2, 2026, Circle said, “Circle freezes assets when legally required, consistent with the rule of law and with strong protections for user rights and privacy.” The company also highlighted the need for improved collaboration across the digital asset ecosystem to effectively address security breaches. The accusations have reignited a broader debate in the cryptocurrency community, which centers on the responsibility of centralized stablecoin issuers in handling security breaches. Critics suggest that perceived delays in Circle's responses diminish confidence in USDC as a reliable and secure stablecoin, underscoring ongoing concerns about the reliability of centralized entities operating within decentralized ecosystems. As of April 4, 2026, at 13:08 UTC, USDC remains stable at $1, and its 24-hour volume shows no change. Tether USDt (USDT) also trades at $1, with its volume fluctuating by -0.016% over the past 24 hours. During the same timeframe, USDC reported a trading volume of $3.73 billion, while USDT recorded $37.93 billion.