Key Takeaways
- A class action lawsuit has been filed against Circle Internet Group in Massachusetts federal court.
- The complaint alleges Circle refused to freeze approximately $230M in USDC that was transferred following the Drift Protocol breach on April 1.
- The attack depleted around $280M from Drift Protocol, marking it as one of 2026’s most significant DeFi security breaches.
- Attackers leveraged Circle’s Cross-Chain Transfer Protocol to shift stolen assets from Solana to Ethereum during a window spanning multiple hours.
- Blockchain intelligence provider Elliptic believes North Korean government-linked threat actors orchestrated the exploit.
Circle Internet Group now finds itself facing serious legal challenges. A class action complaint lodged this Wednesday in a Massachusetts federal courthouse accuses the stablecoin issuer of remaining idle while perpetrators transferred approximately $230 million in USDC after executing one of 2026’s most devastating cryptocurrency thefts.
The security breach targeted Drift Protocol on April 1, siphoning roughly $280 million from the decentralized finance ecosystem. What transpired next — as outlined in the legal filing — was an extended period during which Circle purportedly monitored the funds traversing multiple blockchain networks without intervention.
Joshua McCollum, the lead complainant and a Drift stakeholder, initiated the legal action representing over 100 affected parties. The lawsuit charges Circle with negligence and complicity in enabling the unauthorized transfer of the pilfered assets.
The perpetrators exploited Circle’s proprietary Cross-Chain Transfer Protocol to migrate the stolen USDC from the Solana network to Ethereum. Legal representatives contend that Circle possessed both the technical infrastructure and contractual rights to immobilize those digital wallets — yet deliberately declined to do so.
“Circle permitted this criminal use of its technology and services,” attorneys for McCollum wrote. “These losses would not have occurred, or would have been substantially reduced, had Circle taken timely action.”
The Mira Gibb law firm is providing legal counsel for McCollum and fellow plaintiffs. Financial compensation amounts will be established during trial proceedings.
The complainants also highlighted a telling comparison: approximately one week prior to the Drift incident, Circle froze 16 USDC addresses related to a confidential US civil proceeding. This precedent, they maintain, demonstrates Circle’s capability and willingness to intervene — making its inaction even more questionable.
Circle’s Response and Industry Perspective
Circle has remained silent regarding the litigation. Cointelegraph’s request for comment went unanswered at press time.
ARK Invest’s digital assets research director, Lorenzo Valente, offered a defense of Circle’s stance. He contended that blocking funds absent judicial authorization establishes a problematic precedent — effectively granting private corporations unchecked authority to determine whose assets get restricted.
“Every future freeze is now a judgment call. Every non-freeze is a political statement,” Valente wrote. He acknowledged, though, that the stolen funds would likely end up funding North Korea’s weapons program.
“Whether Circle got it right comes down to how much you weigh rule-of-law principles vs concrete harm,” he said.
The Journey of Stolen Assets
Following the cross-chain migration, the compromised USDC underwent conversion into Ether before being channeled through Tornado Cash, a privacy-focused protocol designed to mask transaction histories.
Blockchain intelligence company Elliptic attributes the breach to North Korean state-sponsored cyber operatives. The firm observed that attackers executed more than 100 separate transactions using Circle’s bridging infrastructure during standard US working hours.
The Drift Protocol exploitation eliminated a substantial portion of the platform’s total locked value and created significant disruptions throughout the broader DeFi landscape.
CRCL stock experienced a 1.84% movement in response to the developing story.
