In view of rising criticism after Drift Protocol’s $270 million exploit, Circle Internet Financial has released a detailed policy statement.
The statement came in response to questions and criticism about the company’s ability to freeze $USDC that was based on legal or demand reasons as opposed to arbitrary decision making.
Circle says in its official blog post that the company’s power to freeze funds is exercised legally and not as an emotional or knee-jerk reaction. The company stresses that the ability is “not a backdoor” and does not represent any sort of surveillance by algorithm.
This clarification comes at a critical time for the digital asset ecosystem, where conversations regarding decentralization, regulatory compliance and user protection are becoming more pressing in the wake of major security breaches.
Recent events are a reminder that trust in digital assets depends on security, accountability, and the rule of law across the ecosystem.
Circle is a regulated company that complies with sanctions, law enforcement orders, and court-mandated requirements. We freeze assets when… pic.twitter.com/zG0FZzCd1n
— Circle (@circle) April 10, 2026
State-Affiliated Threat Actors Linked to Drift Exploit
The scale of the exploit on April 1, which resulted in losses of between $270 million and $285 million, underscores the need for Circle’s response. The attack has been linked to UNC4736, a team that allegedly has connections with North Korea and goes by aliases like AppleJeus or Citrine Sleet, according to analysis from Drift Protocol.
According to reports, the attackers swapped a large part of this stolen cash into USDC and bridged some across chains using Circle’s Cross-Chain Transfer Protocol (CCTP). The transfer has landed Circle in the middle of the controversy, leading skeptics to wonder why the assets weren’t placed on ice mid-transit.
Blockchain analytics platform Elliptic has also weighed in, further backing claims that the exploit could involve state-backed actors and adding a geopolitical twist to a already tangled web.
https://t.co/qYBMCup9i6
— Drift (@DriftProtocol) April 5, 2026
Circle Defends Compliance Framework and Legal Boundaries
Circle’s statement on the matter concerns itself clearly with distinguishing between capability and authority. Although the USDC smart contract includes technical functionality to blacklist or freeze funds, the company says any such action is only taken when legally required.
Circle states that it only freezes USDC under conditions relating to sanctions compliance, law enforcement directives, or court orders, and other legally binding requirements. The firm makes a firm retreat the idea of responding to social pressure or public opinion, pointing out it could violate user rights and clog vital due process.
Circle frames this approach as essential for establishing trust. Focussing on its legal obligations in the US and EU, the company believes it can balance user protection with regulatory requirements.
Importantly, Circle is careful to identify that the same framework that enables intervention when required under law also functions as a defence against arbitrary or politically motivated interference. Maintaining that dual role, it argues, is crucial for the integrity of regulated stablecoins.
Class Action Inquiry Puts Legal Pressure On
Now, the fallout of the exploit is spilling over into legal territory. The incident has spawned a class action investigation by U.S.-based law firm Gibbs Mura, examining possible claims over lost funds and how assets were managed afterwards.
A particular scrutiny is surrounding the role of Circle in the transfer of funds, where it was reported that over $230 million worth of USDC went through its infrastructure unfrozen. While Circle claims it cannot tarefa without legal authority, that claim is now facing legal scrutiny.
The investigation reflects a growing tension within the cryptocurrency industry: the demand for rapid action vs. that which can legally be done in compliance with regulations. As legal structures develop, such cases may provide crucial precedents for the functionality of centralized entities in decentralized environments.
$285M Drift Protocol Hack Triggers Legal Probe
U.S. law firm Gibbs Mura has opened a class action inquiry following the April 1 breach of Drift Protocol.
The exploit is estimated to have caused losses of approximately $280–$285 million. Investigators are now also examining… pic.twitter.com/YyhdUOh5T5
— TheCryptoBasic (@thecryptobasic) April 10, 2026
Market Fallout Ripples Through DeFi Ecosystem
And outside of legal and regulatory considerations, the exploit has had an immediate ripple effect on the DeFi market. Drift Protocol’s total value locked (TVL) dropped from around $550 million to under $250 million after the attack.
At the same time, the 40% drop in level of native token for platform suggests a collapse of confidence from investors and users. The conclusions of the fallout have gone beyond Drift, with more than 20 DeFi protocols disclosing indirect exposure to the incident.
This interconnectedness highlights the systemic risks associated with decentralized finance. A single exploit can have cascading effects on multiple platforms, influencing liquidity, token valuations, and user trust throughout the ecosystem.
It also highlights the evolving technical sophistication of threat actors, especially those linked to state-sponsored operations. The complexities of the attacks demand robust security measures and coordinated responses.
Debate Around Regulation of Stablecoins Heats Up
Circle’s policy statement comes amid a broader push for regulatory clarity in the United States. The U.S. Treasury would like to speed up the rulemaking processes associated with the GENIUS Act, which aims to provide stablecoins with financial integrity rules.
Circle has been outspoken on the need to navigate legal frameworks for digital assets successfully, releasing a statement in support of both GENIUS and CLARITY Acts. Regulators seek to delineate issuers’ obligations in order to eliminate ambiguity and protect consumers.
The company says its compliance-first approach is in line with those regulatory goals. Circle is not suggesting that something happens without being forced to, but rather that the intervention will be through open sources responsible in front of a transparent legal system.
As the debate rages on, Drift exploit will likely to be a critical case in point, the challenge put on centralization v decentralization of funds, what role centralized issuers play in times of crisis and just how much we can adapt regulatory frameworks into ever-evolving technological landscapes.
For now, Circle’s messaging is clear: its freeze powers are not a tool for patchwork law enforcement; they’re a legally enjoined mechanism that’s meant to function inside the rule of law. Whether this stance will appease critics or open the door to further scrutiny remains to be seen as the industry grapples with the fallout from one of its biggest exploits in recent months.
Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services.
Follow us on Twitter @nulltxnews to stay updated with the latest Crypto, NFT, AI, Cybersecurity, Distributed Computing, and Metaverse news!
Be the first to comment