Circle’s latest stablecoin freeze controversy has moved from wallets to protocol infrastructure. The Ethereum contract for Zama’s Confidential USDC, or cUSDC, was reportedly blacklisted, leaving about $12.6 million in USDC immobilized inside the contract and giving privacy-focused DeFi a hard reminder that issuer controls can reach into wrapped-token systems.
On-chain investigator ZachXBT flagged the freeze through his Investigations channel, saying Circle appeared to have blacklisted Zama’s cUSDC contract roughly seven hours earlier. The Zama mainnet reference list identifies the same address, 0xe978F22157048E5DB8E5d07971376e86671672B2, as the canonical cUSDC contract, while its Etherscan page showed about 12.6 million USDC among its token holdings.
Zama’s cUSDC is part of a confidentiality layer built around wrapped ERC-20 assets. The broader confidential ERC-20 framework is designed to conceal balances and transaction amounts while keeping compliance controls available. The freeze puts that design tension under pressure. A blocklist action aimed at one address can affect a shared protocol contract where funds from multiple users may be pooled, wrapped, or routed through the same infrastructure.
Overnight Finance Link Raises More Questions
ZachXBT later said an address beginning 0xf7Fcc deposited about $12.4 million USDC into Zama on May 11 and appeared linked to Overnight Finance. He also pointed to a recent Snapshot governance vote tied to treasury allocation after holders accused the project team of a rug pull. Those claims remain allegations, and the exact legal basis behind the freeze was not public at publication time.
The dispute widened after ZachXBT said the Zama team did not appear to have received prior notice before the freeze. He also named Patagon Management as one of the plaintiffs in the civil case against Overnight Finance and described the entity as known for hostile DAO takeovers and residual-value raids. The case now sits at the intersection of civil litigation, stablecoin enforcement, protocol design, and collateral damage for unrelated users.
Stablecoin Controls Hit Privacy DeFi
Circle’s USDC terms reserve the right to block certain addresses and freeze USDC in circumstances tied to suspected illegal activity, terms violations, or valid legal orders. Stablecoin issuers have used similar controls for recoveries, including cases where stablecoin issuer controls helped return funds to fraud victims. The harder question is how those powers behave when the frozen address is not a single user wallet, but shared protocol infrastructure.
The Zama freeze also lands during a wider fight over crypto privacy tools, where regulators, developers, and users are still debating where privacy ends and compliance risk begins. DeFi already faces pressure from hacks, signer compromises, and bridge failures, with exploit losses putting security teams on edge across the market.
For stablecoin users, the case exposes a precise operational risk: a token can trade like liquid digital cash until an issuer-level blocklist action turns a contract address into a choke point. The frozen balance remained visible on Ethereum, but movement depended on Circle’s controls, legal process, and whatever path Zama can secure for affected cUSDC users.
Be the first to comment