Connect with us
DAPA Banner

Crypto World

ZachXBT Slams Circle for Letting Millions in Stolen USDC Flow Freely After Drift Hack

Published

on

Onchain investigator ZachXBT accused Circle of failing to act while millions in stolen USDC moved freely through its own cross-chain bridge during the $285 million Drift Protocol exploit.

The criticism followed the April 1 attack on the Solana-based decentralized exchange, which ranks as the largest DeFi exploit of 2026 so far.

Circle Faces Backlash Over CCTP Inaction

Drift Protocol, a perpetual futures platform on Solana (SOL), suffered a massive vault drain on April 1. Security firm PeckShield and blockchain analytics platform Arkham Intelligence flagged roughly $285 million in outflows from Drift’s main vault to attacker-controlled wallets.

The attacker moved stolen assets, heavily involving USDC, across multiple wallets before bridging them from Solana to Ethereum using Circle’s Cross-Chain Transfer Protocol (CCTP).

ZachXBT pointed out the transfers occurred during U.S. business hours with no intervention.

Circle was asleep while many millions of USDC were swapped via CCTP from Solana to Ethereum for hours from the 9-figure Drift hack during US hours,” the blockchain investigator stated.

Security researcher Specter echoed those concerns. He noted that the attacker held USDC across wallets for 1 to 3 hours before swapping and deliberately avoided converting to Tether (USDT) during the bridging process, suggesting confidence that Circle would not freeze the funds.

A Pattern of Contradictory Responses

The timing intensified frustration. Just days before the Drift exploit, Circle froze the USDC balances of 16 unrelated business hot wallets on March 23, as part of a sealed U.S. civil case.

That action disrupted operations for exchanges, casinos, and payment processors.

ZachXBT previously called that freeze potentially the most incompetent he had seen in over five years. He argued that, based on on-chain analysis, the wallets engaged in legitimate activity.

Advertisement

Circle later unfroze one wallet linked to Goated.com on March 26, but most remained locked.

The contrast is stark. Circle acted aggressively on a civil matter affecting legitimate businesses. Yet during a confirmed nine-figure exploit, it took no steps to freeze stolen funds transiting its own infrastructure.

ZachXBT also tied this behavior to Circle’s proposed optional privacy features on its upcoming Arc blockchain. He suggested those features could reduce compliance accountability further by limiting who can view transactions.

What Comes Next for Circle and Drift

On the Ethereum side, stolen assets were swapped for roughly 129,000 ETH. Drift’s total value locked collapsed from approximately $550 million to $247 million, and its native DRIFT token fell nearly 28%.

Advertisement
Drift Protocol TVL
Drift Protocol TVL. Source: DefiLlama

Circle has not publicly responded to the criticism. The incident has reignited debate over whether centralized stablecoin issuers can justify their freeze authority if they apply it inconsistently.

The post ZachXBT Slams Circle for Letting Millions in Stolen USDC Flow Freely After Drift Hack appeared first on BeInCrypto.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Alabama Passes DUNA Act Granting DAOs Legal Status

Published

on

Law, DAO

The US state of Alabama has become the second US jurisdiction after Wyoming to grant decentralized autonomous organizations (DAOs) legal status under the DUNA Act.

The Decentralized Unincorporated Nonprofit Association (DUNA) Act (Senate Bill 277) was introduced in February by Republican Senator Lance Bell. The House passed it 82-7 with 16 abstentions on March 17, and has now been signed by Alabama Governor Kay Ivey, according to a16z Crypto.

Speaking about the bill’s passage, a16z Crypto’s head of policy and general counsel, Miles Jennings, said on Wednesday that “decentralized governance is essential to crypto’s future — it’s one of the core constructs in market structure legislation.”

The bill provides legal status and limited liability protections to DAOs, solving a long-unresolved question in crypto: How DAOs exist from a legal standpoint in the real world. 

Advertisement

It gives decentralized communities “the certainty to build, govern, contract, and scale in the real world,” added Jennings. 

Full legal entity status for DAOs

To qualify, a DAO must have at least 100 members joined for a common nonprofit purpose, such as governing a blockchain network or smart contract system.

Governance can operate entirely through blockchain technology and smart contracts, and voting, proposals and consensus mechanisms can all be stored onchain.

These organizations will have full legal entity status, they can own property, sue and be sued, and enter into contracts, while individual members and administrators will be shielded from personal liability. 

Advertisement

Related: Aave DAO backs V4 mainnet plan in near-unanimous vote

“As federal crypto market structure legislation moves closer to becoming law, builders need effective domestic legal structures,” added Jennings. 

West Virginia DUNA Act awaits approval 

A similar DUNA bill (HB 5060), introduced by Representative Tristan Leavitt in February, passed the House on March 4 and is awaiting the governor’s signature in West Virginia. 

Wyoming’s DUNA Act was signed into law by Governor Mark Gordon in March 2024. The state approved the first legally recognized DAO in the United States in July 2021. 

Advertisement

Over 13,000 DAOs exist worldwide with collective treasury assets under DAO control surpassing $24.5 billion as of 2025, according to CoinLaw. The average DAO treasury size is around $1.2 million, and Ethereum and its layer-2 networks host over 85% of DAOs, reported PatentPC in March.

Law, DAO
DAO treasury composition. Source: CoinLaw

Magazine: Your guide to surviving this mini-crypto winter