Key Takeaways
- A class action complaint has been lodged against Circle Internet Group in Massachusetts federal court.
- The lawsuit alleges Circle neglected to freeze approximately $230M in USDC moved following the April 1 Drift Protocol breach.
- The exploit siphoned approximately $280M from Drift Protocol, marking it among 2026’s most significant DeFi security incidents.
- Hackers leveraged Circle’s Cross-Chain Transfer Protocol to bridge stolen assets from Solana to Ethereum across multiple hours.
- Blockchain intelligence provider Elliptic believes North Korean government-affiliated threat actors orchestrated the breach.
Circle Internet Group finds itself embroiled in significant legal trouble. A class action complaint lodged this Wednesday in Massachusetts district court accuses the stablecoin provider of remaining passive while threat actors transferred approximately $230 million in USDC after executing one of 2026’s most devastating cryptocurrency thefts.
The security breach targeted Drift Protocol on April 1, siphoning an estimated $280 million from the decentralized finance platform. The subsequent events — as detailed in the legal filing — unfolded over several hours during which Circle allegedly monitored cross-blockchain fund movements without intervention.
Joshua McCollum, the lead complainant and a Drift investor, initiated the lawsuit representing over 100 affected parties. The legal document charges Circle with negligent conduct and facilitating the unlawful transfer of misappropriated assets.
Threat actors exploited Circle’s proprietary Cross-Chain Transfer Protocol to migrate the stolen USDC from Solana’s network to Ethereum. The litigation contends that Circle possessed both the technological infrastructure and contractual authorization to immobilize those wallets — yet deliberately refrained from doing so.
“Circle allowed this criminal exploitation of its infrastructure and platforms,” McCollum’s legal representatives stated. “These financial losses either would not have materialized, or would have been significantly minimized, had Circle implemented prompt intervention.”
Mira Gibb law firm represents McCollum alongside other affected investors. Monetary compensation will be established during trial proceedings.
The plaintiffs referenced a particularly relevant precedent: approximately one week prior to the Drift security incident, Circle immobilized 16 USDC wallets related to a sealed US civil litigation. This intervention, they contend, demonstrates Circle possessed both the capability and willingness to intervene — simply not in this instance.
Circle’s Response and ARK’s Perspective
Circle has remained silent regarding the lawsuit publicly. Cointelegraph contacted the company but has not received an immediate statement.
ARK Invest’s digital assets research director, Lorenzo Valente, offered a defense of Circle’s stance. He contended that immobilizing funds absent a judicial directive establishes a problematic precedent — granting private corporations unchecked authority over freezing decisions.
“Every subsequent freeze becomes a subjective decision. Every decision not to freeze becomes a political declaration,” Valente stated. He conceded, however, that the misappropriated assets would probably finance North Korea’s military programs.
“Whether Circle’s decision was appropriate depends on the balance between rule-of-law fundamentals versus tangible damage,” he explained.
The Fate of Stolen Assets
Following the blockchain bridge transaction, the stolen USDC underwent conversion to Ether before being channeled through Tornado Cash, the privacy-focused protocol, effectively masking the transaction path.
Blockchain analytics company Elliptic attributes the exploit to North Korean state-sponsored threat actors. Elliptic observed the perpetrators executed more than 100 transactions utilizing Circle’s bridging infrastructure during standard US operating hours.
The Drift Protocol security breach eliminated a substantial portion of the platform’s total value locked and created widespread consequences throughout various DeFi platforms.
CRCL stock experienced a 1.84% movement after the news broke.
