#Circle拒冻结Drift被盗USDC Circle Refuses to Freeze Stolen USDC from Drift Hack: A Controversial Stand

A major debate has erupted in the crypto world following Circle’s refusal to freeze stolen USDC linked to the recent Drift Protocol exploit. The decision has raised fundamental questions about the role of centralized stablecoin issuers in a decentralized ecosystem, security vs. censorship, and the limits of asset recovery.

The Incident: Drift Protocol Hack (April 2026)

On April 1, 2026, Drift Protocol, a decentralized exchange (DEX) built on Solana, suffered a sophisticated exploit. Initial estimates place the loss at approximately $285 million in various cryptocurrencies, with a significant portion being USDC (USD Coin).

The attacker exploited a vulnerability in Drift’s cross-margin and lending pools, allowing them to manipulate oracle pricing and withdraw far more funds than their collateral allowed. Within hours, the stolen USDC was being moved across multiple blockchains—primarily Ethereum, Solana, and Arbitrum—using cross-chain bridges and instant swap services.

Circle’s Response: A Refusal to Freeze

In previous incidents (e.g., the 2022 Nomad Bridge hack and 2023 Multichain exploit), Circle quickly blacklisted addresses holding stolen USDC, effectively freezing those funds. This time, however, the company took a different stance.

Circle officially declined to freeze the stolen USDC, citing three key reasons:

1. Lack of a valid legal order: Circle stated that no U.S. court or government agency had issued a binding asset-freeze order specific to this incident at the time of the request.
2. Technical fragmentation: The stolen USDC had already been split across multiple chains and mixed through privacy-preserving protocols and instant swap aggregators. Circle argued that freezing on Ethereum or Solana alone would be "symbolic but ineffective" in recovering meaningful funds.
3. Policy shift: In an internal memo later leaked to the press, Circle noted a change in policy: “Going forward, unilateral freezes will only occur in cases of sanctioned entities (e.g., OFAC SDN list) or direct court orders. We are not a law enforcement agency.”

The Backlash: Drift Protocol and Community Response

Drift Protocol’s team publicly criticized Circle’s decision, calling it a "betrayal of DeFi security expectations."

"Circle froze funds in past hacks without hesitation. Why the silence now? This selective enforcement creates a dangerous precedent," – Drift Protocol official statement via X.

On-chain investigators, including ZachXBT, noted that the attacker had already laundered over 70% of the stolen USDC within 48 hours—largely due to the absence of rapid freezes. Many in the community argue that even a temporary freeze would have bought critical time for tracing and negotiations.

However, others supported Circle’s stance. Prominent crypto lawyer Gabriel Shapiro tweeted:
“A stablecoin issuer freezing assets without a court order is centralized overreach. Circle is finally acting like a regulated entity, not a vigilante. If DeFi wants freezes, it should build them into smart contracts—not rely on a company’s goodwill.”

Why This Matters: DeFi’s Centralization Dilemma

This incident exposes a long-standing contradiction in DeFi:

· USDC is the second-largest stablecoin ($30B+ market cap), widely used as "safe money" in decentralized protocols.
· Yet, Circle—a centralized company—holds the private keys to freeze or blacklist any USDC address.

Until now, many DeFi users accepted this risk, assuming Circle would freeze stolen funds to protect the ecosystem. Circle’s refusal breaks that assumption. The message is clear: Do not rely on Circle to bail out hacks.

What Happens Next?

· Legal action pending: Drift Protocol is preparing an emergency filing in a New York court to compel Circle to freeze remaining traceable USDC.
· On-chain bounty offered: Drift has offered a $10 million white-hat bounty to the attacker, with no response so far.
· Policy ripple effects: Other stablecoin issuers (Paxos, Tether) are reportedly reviewing their own freeze policies in light of this case.

Key Takeaways for Investors and Developers

Aspect Implication
For DeFi users USDC is not risk-free. Even "trusted" stablecoins may not freeze stolen funds.
For developers Consider building circuit breakers or decentralized freeze mechanisms into protocols.
For regulators This case may accelerate calls for mandatory freeze powers for stablecoin issuers via legislation (e.g., the proposed STABLE Act in the U.S.).
For Circle Its reputation as a security-friendly stablecoin has taken a hit. Competitors like DAI or USDe may gain favor among DeFi purists.

---

Conclusion

Circle’s refusal to freeze the Drift Protocol’s stolen USDC marks a turning point in crypto’s ongoing tug-of-war between decentralization and accountability. While legally defensible, the decision has left the DeFi community divided and victims unprotected.

The ultimate question remains: Who should police blockchain theft—code, courts, or companies? For now, Circle has given its answer: not us, without a court order.