On-chain investigator ZachXBT has printed a brand new report, titled “The Circle USDC Information,” alleging greater than $420 million in compliance failures tied to the corporate’s USDC stablecoin since 2022.
The evaluation, launched on social media platform X on Friday, chronicles a number of excessive‑profile decentralized finance (DeFi) exploits by which Circle allegedly failed to make use of its on‑chain freezing and blacklist capabilities to halt the circulate of stolen funds.
Alleged Inaction By Circle
Circle’s token contract consists of an express freeze/blacklist operate, and the corporate’s phrases of service reserve the proper to limit entry for suspected illicit actors “in its sole discretion.”
But, ZachXBT’s report claims that in lots of broadly reported thefts and hacks, the issuer both delayed motion or didn’t freeze funds in any respect, permitting attackers to maneuver massive sums throughout blockchains and convert them into different property.
The report opens with the April 1, 2026, Drift Protocol exploit, by which the attacker drained roughly $280 million. In accordance with ZachXBT, the thief used Circle’s Cross‑Chain Switch Protocol (CCTP) to bridge greater than 232 million USDC from Solana (SOL) to Ethereum (ETH) in over 100 transactions.
The incident had ripple results throughout the Solana ecosystem, not directly impacting greater than 10 DeFi tasks. Regardless of the funds shifting by means of Circle’s native bridge for hours, the report says no USDC was frozen in the course of the laundering.
ZachXBT additionally particulars a January 25, 2026, assault on SwapNet that resulted in $16 million being stolen. Roughly $3 million in USDC remained within the exploiter’s deal with for 2 days. Each legislation enforcement and personal‑sector analysts reportedly submitted non permanent freeze requests to Circle for that deal with, however Circle didn’t act.
9‑Determine Losses In Crypto Hacks
Amongst a number of different instances cited within the report, ZachXBT additionally factors to broader, lengthy‑operating patterns. In April 2024, he printed a separate investigation into the Lazarus Group laundering that traced funds from greater than two dozen hacks being transformed to fiat.
Regulation enforcement requested freezes from 4 stablecoin issuers — Circle, Tether, Paxos, and Techteryx — for 2 addresses tied to that investigation. The report claims the opposite three issuers acted rapidly, whereas Circle took roughly 4.5 months longer to freeze the identical addresses.
Taken collectively, ZachXBT says these instances — lots of them public and excessive‑worth — add as much as 9‑determine losses to the crypto ecosystem brought on by repeated inaction over a multi‑yr interval.
He stresses that the $420 million-plus determine covers solely main public incidents and that the true complete may very well be considerably increased. The overarching declare is that Circle possesses the contractual and technical instruments to intervene, but has not used them persistently or promptly, with concrete hurt to victims and the broader neighborhood.
“They’ve each instrument and useful resource accessible to do higher. They only haven’t,” he writes, closing his report with a pointed query: who, precisely, is Circle serving?
Featured picture from OpenArt, chart from TradingView.com
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent overview by our group of prime expertise consultants and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.