After the $285 million Drift hack, the focus is shifting to Circle (CRCL) and whether it could have done more to stop the money.

The attacker siphoned off roughly $71 million in USDC as part of the exploit Wednesday, according to blockchain security firm PeckShield. After converting most of the rest of the stolen assets to USDC, the hacker used Circle’s cross-chain transfer protocol, CCTP, to bridge about $232 million in USDC from Solana to Ethereum, making recovery efforts more difficult.

That movement has drawn criticism from parts of the crypto community, including prominent blockchain investigator ZachXBT, who argued Circle could have acted faster to limit the damage.

“Why should crypto businesses continue to build on Circle when a project with 9 fig[ure] TVL [total value locked] could not get support during a major incident?,” he said in an X post following the attack.

To freeze or not to freeze

The company had tools at its disposal, ZachXBT pointed out. Under its own terms, Circle reserves the right to blacklist addresses and freeze USDC tied to any suspicious activity.

Preemptively freezing wallets linked to the exploit could have slowed or stopped the attacker’s ability to move funds, one stablecoin infrastructure firm founder told CoinDesk.

However, acting without a court order or law enforcement request might expose Circle to legal risk, the person added.

Salman Banei, general counsel of tokenized asset network Plume, said freezing assets without formal authorization could expose issuers to liability if done incorrectly. He argued regulators should address that legal gap.

“Lawmakers should provide a safe harbor from civil liability if digital asset issuers freeze assets when, in their reasonable judgment, there is strong basis to believe that illicit transfers have occurred,” Banei said.

That constraint was central to the company’s response.

“Circle is a regulated company that complies with sanctions, law enforcement orders, and court-mandated requirements,” a spokesperson said in an email to CoinDesk. “We freeze assets when legally required, consistent with the rule of law and with strong protections for user rights and privacy.”

‘Gray zone’

The episode highlights a deeper tension that’s drawing increasing scrutiny as stablecoins grow.

Tokens like USDC are becoming a core part of global money flows, especially for cross-border payments and trading. At the same time, they are also used in illicit activity, putting issuers under pressure to act quickly when things go wrong.

According to TRM Labs, roughly $141 billion in stablecoin transactions in 2025 were linked to illicit activity, including sanctions evasion and money laundering.

Blockchain security firms pointed to North Korean hackers as likely being behind the Drift exploit.

Stablecoins issued by centralized, regulated entities like Circle’s USDC are designed to be programmable and controllable, a feature that can help stop illicit flows but could also raise concerns about overreach and due process.

In the Drift exploit’s case, the situation isn’t that clear-cut, said Ben Levit, founder and CEO of stablecoin ratings agency Bluechip.

“I think people are framing this too simplistically as ‘Circle should’ve frozen,’” he said. “This wasn’t a clean hack, it was more of a market/oracle exploit, which puts it in a gray zone.”

“So any action by Circle becomes a judgment call, not just a compliance decision,” he added.

To him, the bigger issue is consistency. “USDC can’t be positioned as neutral infrastructure while also allowing discretionary intervention without clear rules,” Levit said. “Markets can handle strict policies or no intervention, but ambiguity is much harder to price.”

That leaves issuers in a difficult position. Moving too slowly risks criticism that they are enabling bad actors, while acting too quickly without legal backing raises concerns about overreach.

And in fast-moving exploits, that trade-off becomes especially stark, with the window to act often measured in minutes rather than weeks or months of legal processes.

The Independent Community Bankers of America has opposed the Office of the Comptroller of the Currency’s (OCC) conditional approval of Coinbase’s national trust bank charter, warning the application falls short of regulatory standards and could pose risks to consumers and the financial system.

On Thursday, ICBA said Coinbase’s application shows deficiencies in risk controls, profitability and resolution planning, and argued the OCC lacks statutory authority to expand trust powers for crypto-related activities without applying the full set of banking regulations.

The group said the decision reflects a broader trend of nonbank entities seeking access to the benefits of bank charters without meeting the same regulatory requirements. It wrote:

The sudden influx of applications demonstrates nonbank entities are seeking the benefits of a US bank charter without satisfying the full scope of US bank regulations.

Americans for Financial Reform Education Fund also criticized the decision, warning the approval departs from longstanding banking law and could expose the financial system to risks tied to crypto market volatility, fraud and money laundering.

The objections follows the OCC’s conditional approval on Thursday of Coinbase’s application to establish a national trust bank, after six months of review by the US regulator.

Coinbase released a statement on Thursday saying the charter would bring its custody and market infrastructure business under federal oversight, emphasizing that it does not plan to hold customer deposits or engage in fractional reserve lending, and adding that “the right path forward for crypto is through the system — not around it.”

Related: Crypto awareness tops 80% among young people in UK: Coinbase survey

Stablecoin yield dispute stalls crypto market structure bill

The opposition is part of a broader dispute between banking groups and crypto companies over the role of digital assets in the financial system, particularly around stablecoins and yield-bearing products.

In January, CEO of Bank of America Brian Moynihan warned that allowing stablecoin issuers to offer interest could draw as much as $6 trillion in deposits out of the banking system, reducing lending capacity and pushing borrowing costs higher.

Industry groups such as the Bank Policy Institute have also raised similar concerns in letters to lawmakers, arguing that regulatory gaps could allow yield-bearing stablecoin products to bypass restrictions and disrupt traditional credit channels.

The debate is currently playing out in Washington, where Coinbase is engaged in policy discussions over the US Digital Asset Market Clarity Act, a bill aimed at establishing federal rules for crypto oversight.

While Coinbase CEO Brian Armstrong said in January that the company could not support the legislation as drafted due to restrictions on stablecoin rewards, Coinbase chief legal officer Paul Grewal said on Thursday that lawmakers are nearing agreement on core elements of the bill, though the yield issue remains a key sticking point.

The dispute has delayed a Senate Banking Committee markup, a required step before the bill can advance to a full Senate vote, leaving broader efforts to establish a federal framework for digital assets unresolved.

Magazine: Nobody knows if quantum secure cryptography will even work