Circle confronted new scrutiny after on-chain investigator Zach
abstract
- ZachXBT mentioned Circle has didn’t freeze unlawful USDC throughout 15 hacking and fraud incidents since 2022.
- The allegations embody GMX, Cetus, and Drift, and Circle allegedly had time to dam the funds.
- The accusations have renewed debate about stablecoin issuers, compliance obligations, and gradual response to on-chain crimes.
In keeping with ZachXBT’s public thread and follow-up report, the allegations heart on 15 incidents of hacking and fraud, alleging that Circle had time to behave however didn’t act quick sufficient.
Zack XBT said The Circle took “minimal” motion or didn’t take motion in 15 separate incidents associated to theft or unlawful USDC flows. He claimed that the delay spanned three years and was associated to regulation enforcement requests, personal sector requests, and incidents made seen on-chain.
He gave a number of examples. ZachXBT mentioned Circle didn’t freeze roughly $9 million in USDC associated to the July 2025 GMX hack. He additionally mentioned that Circle blacklisted the wallets related to the Cetus hack after the stolen USDC had already been transformed to Ether.
He mentioned that within the current Drift Protocol incident, the attackers moved roughly $232 million by greater than 100 transactions inside a six-hour window earlier than the funds have been transformed. Cointelegraph mentioned Circle didn’t present a direct response previous to publication.
The allegations have renewed debate over how a lot accountability centralized stablecoin issuers ought to bear within the occasion of hacking or fraud incidents. The timing of the response was a central subject within the debate surrounding ZachXBT’s claims, as Circle has the technical potential to freeze USDC and blacklist pockets addresses.
ZachXBT tried to separate the criticism from broader assaults on Circle. he wrote,
“Circle has developed a fantastic product, and I personal USDC myself. This isn’t a put up to anticipate Circle to break down.”
He added that “9 numbers have been misplaced from the ecosystem resulting from repeated inaction” and mentioned the $420 million determine solely covers main public circumstances.
Circle’s previous actions entice consideration
The brand new criticism additionally drew consideration to Circle’s earlier feedback concerning transaction controls. In September 2025, Circle president Heath Tarbert mentioned the corporate was contemplating “reversible” USDC transactions that might be rolled again or mounted within the occasion of hacking, theft, or fraud. This concept means that Circle is already contemplating stronger person protections for some fee flows.
Circle has beforehand been concerned in different enforcement circumstances. In August 2022, the U.S. Treasury Division’s Workplace of Overseas Belongings Management sanctioned Twister Money for utilizing the mixer to launder greater than $7 billion in cryptocurrencies since 2019. Following these sanctions, Circle froze the USDC related to the sanctioned Twister Money addresses, indicating that the corporate used blacklist administration when required by compliance measures.
