Circle Hit With Class Motion Go well with Over $280M Drift Hack

April 17, 2026


Circle Web Group is dealing with a category motion lawsuit led by a Drift Protocol investor claiming it didn’t freeze funds stolen in a $280 million exploit of the protocol on April 1.

The lawsuit was filed by Drift investor Joshua McCollum on behalf of over 100 members in a US district courtroom in Massachusetts on Wednesday, which accused Circle of permitting the attackers to switch about $230 million price of USDC (USDC) from Solana to Ethereum through Circle’s Cross-Chain Switch Protocol (CCTP) over a number of hours with out intervention.

“Circle permitted this felony use of its know-how and companies,” attorneys representing McCollum wrote, including: “These losses wouldn’t have occurred, or would have been considerably lowered, had Circle taken well timed motion.”

The go well with accuses Circle of aiding and abetting conversion in addition to negligence. Mira Gibb, the regulation agency representing McCollum and different Drift traders, is looking for damages, with the ultimate quantity to be decided at trial.

The case touches on a authorized gray space round crypto corporations that retain management over person funds. Whereas such corporations could have the technical capacity to intervene or freeze property, they typically cite regulatory constraints or the dearth of quick authorized authority as causes for inaction — leaving accountability unclear as exploits unfold in real-time.

Supply: James Seyffart

McCollum’s attorneys identified that Circle froze 16 USDC wallets in reference to a sealed US civil case a few week earlier than the Drift incident to argue that Circle had the technical capability to do the identical.

Cointelegraph reached out to Circle for remark, however didn’t obtain a direct response.

Crypto analytics agency Elliptic suspected the exploit was dedicated by North Korean state-backed hackers, who remodeled 100 transactions through Circle’s bridging know-how throughout US working hours, the place the stablecoin firm is predicated.

Associated: Ukraine arrests FBI-wanted cybercrime suspect, seizes $11M in property

The funds have been transformed into Ether (ETH) and despatched by the Twister Money privateness protocol to launder the proceeds and obscure the path.

Circle was put in a lose-lose place: ARK Make investments

Whereas Circle confronted backlash for the inaction, ARK Make investments’s director of analysis for digital property, Lorenzo Valente, argued on Thursday that it made the correct determination, arguing that freezing funds and not using a authorized order opens the door for arbitrary discretion.

“Each future freeze is now a judgment name. Each non-freeze is a political assertion. Why freeze the Drift hacker however not that sketchy Nigerian fraud pockets? Why this protester however not that one?”

Whereas Valente sided with Circle’s determination, he speculated that the stolen funds will probably fund North Korea’s nuclear weapons program:

“Whether or not Circle acquired it proper comes all the way down to how a lot you weigh rule-of-law ideas vs concrete hurt. Affordable individuals disagree.”

Journal: Are DeFi devs accountable for the criminal activity of others on their platforms?