Flow

Drift

Solana

ZachXBT

USDC

Blockchain investigator ZachXBT has publicly accused Circle, the issuer of USDC, of failing to freeze millions in stolen stablecoins that moved freely across chains for hours following the Drift Protocol hack on April 1, 2026, an exploit that may have drained up to $285 million from the Solana-based trading platform.
<h2 id="what-zachxbt-is-alleging-about-circle-after-the-drift-hack">What ZachXBT Is Alleging About Circle After the Drift Hack</h2>
<div>
 WHAT TO KNOW
 <ul>
 <li>Drift Protocol confirmed an "active attack" on April 1 and suspended deposits and withdrawals, with loss estimates ranging above $250 million.</li>
 <li>ZachXBT says Circle allowed millions in stolen USDC to be bridged from Solana to Ethereum via its own Cross-Chain Transfer Protocol (CCTP) without intervention.</li>
 </ul>
</div>
Drift Protocol announced on April 1 that it was <a href="https://twitter.com/DriftProtocol/status/2039417136729227425" rel="noopener noreferrer nofollow">experiencing an active attack</a> and immediately suspended deposits and withdrawals. The platform, which had previously <a href="https://bitcoininfonews.com/drift-protocol-unusual-activity-solana-users-warned/" rel="noopener noreferrer nofollow">flagged unusual activity</a> in its systems, moved quickly to contain the damage on its end.
Reporting from Decrypt placed transfers from Drift to the attacker's address at more than <a href="https://decrypt.co/363087/solana-drift-protocol-exploited-285-million" rel="noopener noreferrer nofollow">$250 million</a>, with security firm PeckShield estimating the total exploit could reach $285 million. The attacker initially moved roughly 41 million JLP tokens worth approximately $155 million before additional funds followed.
ZachXBT's criticism landed hours later, directed squarely at Circle. He said the stablecoin issuer was "asleep" while stolen USDC was swapped via CCTP from Solana to Ethereum during U.S. business hours.
<blockquote class="twitter-tweet">
 Circle was asleep while many millions of USDC was swapped via CCTP from Solana to Ethereum for hours from the 9 figure Drift hack during US hours. Value was moved and nothing was done yet again. Comes days after you froze 16+ business hot wallets incompetently which is still… <a href="https://t.co/T0Xwg1HIfO" rel="noopener noreferrer nofollow">pic.twitter.com/T0Xwg1HIfO</a>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/2039496650906034602?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">April 2, 2026</a>
</blockquote>
Source: @zachxbt on X
CCTP is Circle's own infrastructure for moving USDC between blockchains, as described in the company's <a href="https://developers.circle.com/cctp" rel="noopener noreferrer nofollow">developer documentation</a>. That the stolen funds reportedly traveled through Circle's own bridge protocol is central to ZachXBT's argument that the issuer had both the visibility and the authority to intervene.
<h2 id="why-the-stolen-usdc-flow-became-the-real-flashpoint">Why the Stolen USDC Flow Became the Real Flashpoint</h2>
The controversy shifted from the hack itself to Circle's perceived inaction. According to unconfirmed reports, more than $230 million in stolen USDC may have crossed CCTP over roughly six hours without Circle taking any freezing action. That figure has not been independently verified through on-chain explorer data.
ZachXBT sharpened the critique by pointing to Circle's recent decision to freeze more than 16 business hot wallets in an apparently unrelated action. The contrast, freezing wallets in one case while allowing stolen funds to flow in another, is what fueled the backlash.
Circle has the technical ability to blacklist USDC addresses, a power it has exercised in past incidents involving sanctioned entities and law enforcement requests. No public statement from Circle addressing the Drift-related criticism was found at the time of publication. The <a href="https://bitcoininfonews.com/drift-protocol-exploit-solana-285m-stolen/" rel="noopener noreferrer nofollow">initial Drift exploit coverage</a> focused on the protocol-level breach, but attention quickly pivoted to the stablecoin issuer's role.
Despite the scale of the exploit, USDC itself showed no meaningful market stress. The stablecoin traded at <a href="https://www.coingecko.com/en/coins/usd-coin" rel="noopener noreferrer nofollow">$0.999874</a> with a market cap near $77.17 billion and 24-hour trading volume around $13.58 billion, indicating the controversy remained reputational rather than systemic.
<figure><img src="https://bitcoininfonews.com/wp-content/uploads/2026/04/bitcoininfonews__coingecko__price-chart-7.jpg" alt="CoinGecko price chart for ZachXBT Slams Circle for Letting Millions in Stolen USDC Flow Freely After Drift Hack">
 <figcaption>
 CoinGecko market snapshot used to anchor the spot-price section for usd-coin.
 </figcaption>
</figure>
<h2 id="what-this-means-for-circle-and-the-wider-crypto-response-debate">What This Means for Circle and the Wider Crypto Response Debate</h2>
The incident puts fresh pressure on Circle at a time when <a href="https://bitcoininfonews.com/treasury-genius-act-stablecoin-rulemaking/" rel="noopener noreferrer nofollow">stablecoin regulation</a> is already advancing through Congress. The company sits at the center of an ongoing debate about whether entities that control freeze and blacklist capabilities on major stablecoins should be expected to act as first responders during exploits.
For projects building on USDC infrastructure, the episode raises practical questions. If Circle can freeze wallets preemptively but does not intervene when stolen funds transit its own bridge for hours, protocols and users may question the consistency of those controls. The situation echoes broader tensions in crypto between <a href="https://bitcoininfonews.com/ripple-treasury-xrp-rlusd-corporate-finance/" rel="noopener noreferrer nofollow">corporate treasury management of digital assets</a> and decentralized ideals.
Whether Circle chose not to act, lacked the real-time monitoring to detect the flow, or faced legal constraints that prevented intervention remains unclear. The company has not publicly responded, and no regulatory filing or court document tied to the Drift episode has surfaced.
The reputational cost may extend beyond this single incident. As institutional products like <a href="https://bitcoininfonews.com/xrp-spot-etf-significant-outflow/" rel="noopener noreferrer nofollow">spot ETFs</a> bring more traditional capital into contact with stablecoin infrastructure, the expectation that issuers like Circle will act decisively during crises is likely to intensify.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
<a href="https://bitcoininfonews.com/" rel="noopener noreferrer nofollow">Bitcoininfonews</a> first published the article titled <a href="https://bitcoininfonews.com/?p=35288" rel="noopener noreferrer nofollow">ZachXBT Slams Circle Over Stolen USDC After Drift Hack</a>.

ZachXBT Slams Circle Over Stolen USDC After Drift Hack

Table of Contents

BitcoinInfoNews.Com

Other articles published on Apr 2, 2026

Join our free newsletter for daily crypto updates!