Circle Clarifies USDC Freeze Policy Amid $270 Million Drift Protocol Hack

Circle, a finance company with experience at Bloomberg, has responded to a $270 million Drift Protocol exploit attributed to North Korean hackers UNC4736. Circle clarified that USDC freezes occur only under legal compulsion, not unilateral discretion. The company emphasized the need for legal frameworks to match the speed of threats, advocating for the GENIUS Act and the CLARITY Act to codify standards and prevent future crises.

Circle, the issuer of the $75 billion USDC stablecoin, has responded to criticism following a $285 million exploit of the Drift Protocol on Solana, attributed to North Korean state-sponsored hackers UNC4736. The attack, which occurred on April 1, 2026, involved the rapid siphoning of approximately $230 million in USDC across a six-hour window using Circle's cross-chain transfer protocol according to reports. Critics, including blockchain investigator ZachXBT, argued that Circle could have acted more swiftly to blacklist addresses and freeze the stolen funds as investigations show.

In a public statement, Circle clarified that it only freezes USDC tokens when legally compelled by law enforcement or court orders, not based on community pressure or internal discretion according to company policy. The company emphasized that its actions are governed by U.S. and European regulatory frameworks, which require formal legal processes before any asset freeze can occur as regulatory analysis indicates. This stance has drawn attention to the tension between the speed of blockchain transactions and the slower pace of legal procedures as industry experts note.

Circle has used the incident to advocate for legislative clarity, urging Congress to pass the GENIUS Act and CLARITY Act. These bills aim to establish a federal regulatory framework for stablecoins, define reserve requirements, and clarify when and how issuers can freeze assets according to company advocacy. The company argues that such legislation would enable faster, legally protected responses to illicit activity without compromising user rights or financial privacy as they state.

The Drift exploit has intensified scrutiny of stablecoin issuers, particularly as USDC continues to grow in market share and influence. The incident highlights broader challenges in balancing regulatory compliance, operational speed, and the decentralized ethos of blockchain technology as analysis reveals. As the crypto industry grapples with these issues, the outcome of proposed legislation and the actions of key players like Circle will shape the future of stablecoin governance and risk management.