Circle’s USDC freeze power faces fresh scrutiny after wallets were blocked while stolen funds moved

Make CryptoSlate preferred on

Circle’s biggest selling point may be becoming its biggest liability. On-chain investigator ZachXBT’s “Circle Files” allege that the USDC issuer has inconsistently applied its freeze powers.

Circle was too slow in 15 cases involving more than $420 million in allegedly illicit funds since 2022, yet broad enough to sweep 16 operational business wallets in a sealed US civil matter. The wallets were tied to exchanges, casinos, and forex services that ZachXBT said did not appear connected.

Why this matters: USDC is a core settlement asset in crypto, widely used by exchanges, traders, payment flows, and DeFi protocols. Circle’s freeze decisions extend beyond individual legal disputes or hack responses and set the boundary for how much operational risk businesses accept when holding or moving dollars on-chain.

The firm later unfroze at least one of those wallets, belonging to Goated.com, adding weight to the question of how precisely Circle reviews the addresses it blocklists.

That sequence of “slow on theft, sweeping on civil process” lands at a difficult moment.

USDC held roughly $77.2 billion in circulation as of April 3, in a total stablecoin market of nearly $316.8 billion, accounting for about 24.5% of that pool. One of the cases ZachXBT cites, the Drift exploit, saw more than $280 million in USDC move across 100-plus transactions in roughly six hours.

Related Reading

Circle under fire as $230M in stolen USDC flows unblocked days after freezing legitimate accounts

The Drift exploit exposes a growing contradiction in how stablecoin issuers enforce control during crises.

Apr 3, 2026 · Oluwapelumi Adejumo

At that scale and speed, the gap between “can freeze” and “froze in time” is the entire practical question.

A bar chart shows 16 operational wallets frozen in a sealed civil matter against 15 alleged slow-action theft cases totaling $420 million since 2022.

The legal stack Circle built

Circle’s control surface has real on-chain teeth. Its EVM stablecoin contract includes a blocklist feature under a blocklister role, and blocklisted addresses cannot transfer or receive tokens.

Circle designed the contract to be both pausable and upgradeable.

That architecture existed long before this controversy arose, and Circle’s Access Denial Policy codifies when that power is triggered.

Circle can block individual addresses on every blockchain where its stablecoins are issued. Once denied, the associated balance cannot move on-chain.

The policy limits freezes to two narrow triggers: when Circle decides, in its sole discretion, that failing to act would threaten network security or integrity, or when a valid legal order from a recognized US or French authority requires it.

Reversals require formal confirmation that the legal obligation or security basis no longer applies.

The USDC Terms add a second layer. Nothing in those terms obligates Circle to track, verify, or determine the provenance of users’ USDC balances.

Yet, Circle also reserves the right to block addresses and freeze associated USDC that it determines, in its sole discretion, may be tied to illegal activity.

The Circle Mint User Agreement goes further: Circle may suspend accounts in its sole and absolute discretion, including under a court order, and may restrict redemptions or transfers when the law or a court order prohibits them.

The access-denial policy reads narrower and more formally rules-based, blocking sounds exceptional, tied to security events or legal compulsion. The broader USDC terms and user agreement grant the issuer considerably greater discretion.

Circle’s legal terms afford the issuer considerably more latitude than the access-denial policy’s narrow framing implies. When legal process and user continuity collide, Circle’s own hierarchy prioritizes compliance and issuer control.

Where the criticism bites

The 16-wallet incident illustrates why that hierarchy now troubles operators. Circle’s freeze power executed quickly and broadly when a sealed civil matter arrived at its desk.

ZachXBT’s “Circle Files” allege the same power moved too slowly across 15 theft cases since 2022, and the Drift window, $280 million-plus across more than 100 transactions in six hours, is the sharpest example because the scale and transaction count appeared on-chain in real time.

The GENIUS Act, passed in July 2025, created a US regulatory framework for payment stablecoins, treating USDC-type products as regulated financial infrastructure.

Related Reading

Trump signs GENIUS Act into law, activating America’s first regulatory framework for stablecoins

In addition to sign the stablecoin framework into law, Trump vowed to approve the market structure bill next.

Jul 18, 2025 · Gino Matos

The OCC’s implementing proposal has a comment deadline of May 1. FATF’s March 2026 report stressed that supervisors should assess whether blockchain analytics and controls deliver tangible enforcement outcomes, and that timely public-private coordination is crucial for asset recovery.

CryptoSlate Daily Brief

Daily signals, zero noise.

Market-moving headlines and context delivered every morning in one tight read.

5-minute digest 100k+ readers

Email address

Get the brief

Free. No spam. Unsubscribe any time.

Whoops, looks like there was a problem. Please try again.

You’re subscribed. Welcome aboard.

That is the precise standard ZachXBT and affected operators are now applying to Circle.

Circle markets USDC as fully backed, transparently managed, and the world’s largest regulated stablecoin. Circle’s own 2026 Internet Financial System report cited $50 trillion-plus in cumulative USDC settlement, 40% of stablecoin transaction volume, and 29% of stablecoin circulation as of September 2025.

At that scale, freeze governance operates at systemic weight, and the examination it now faces reflects the infrastructure role Circle has claimed for itself.

A two-column table maps bull and bear paths for USDC, from freeze-review transparency to circulation outcomes ranging between $68 billion and $90 billion.

Two paths for Circle

The bull path runs through transparency and speed.

If Circle publishes a clearer review standard for freezes tied to civil process, detailing what internal review fires before Circle blocklists operational business wallets, and demonstrates materially faster coordination in future hack response situations, the controversy becomes a governance maturation story.

In that scenario, regulation under the GENIUS framework and MiCA rewards the most institutionalized issuer, and USDC circulation could recover to the $82 billion to $90 billion range, with 25% to 27% market share.

The 16-wallet incident, with Circle having already restored one wallet, would read as the moment Circle clarified its process.

The bear path runs through accumulation. More examples of slow hack responses or overbroad civil-process freezes, and operators who hold USDC in hot wallets, such as exchanges, payment companies, and DeFi protocols, are starting to diversify settlement routes.

A stablecoin can maintain its $1 peg while losing strategic relevance, and operators diversifying away from Circle would not trigger any depeg alert.

Tether, PYUSD, and a widening field of issuer-specific tokens each give operators a route away from Circle’s control stack.

In that outcome, USDC circulation drifts toward a $68 billion to $75 billion range and a 20% to 23% market share, as businesses reprice the operational risk of sitting within Circle’s discretion.

The next checkpoint arrives through operational performance, depending on how quickly Circle responds to the next hack, how quickly it restores blocklisted wallets, and if freezes land on operators with a clearer rationale than the last batch.

The OCC comment window closes on May 1, and the regulatory regime for payment stablecoins is taking shape while this dispute is live.

The market now wants to know if the compliance used by Circle model protects users or concentrates power in an issuer whose review standards operators cannot see.

Mentioned in this article

USDC PayPal USD Tether Circle ZachXBT

Posted in

Featured Regulation Stablecoins Hacks Payments USDC

Context

Related coverage

Switch categories to dive deeper or gain broader context.

USDC Latest News Hacks Top Category Press Releases Newswire

Hacks

Circle under fire as $230M in stolen USDC flows unblocked days after freezing legitimate accounts

The Drift exploit exposes a growing contradiction in how stablecoin issuers enforce control during crises.

2 days ago

Legislation

White House meeting could unfreeze the crypto CLARITY Act this week, but crypto rewards likely to be the price

A high-stakes meeting between the White House and banking giants may trade stablecoin yield for federal regulation.

2 months ago

Tether’s $181B paradox: How USDT keeps growing as its market share collapses under MiCA

Stablecoins · 6 months ago

UK Reform Party opposes Bank of England’s stablecoin limits and CBDC plans

Politics · 7 months ago

After USDT’s global victory Circle’s USDC battles Tether’s USAT in $650B USA showdown

Stablecoins · 7 months ago

Majority of institutions with no stablecoin project plan adoption within 12 months

Stablecoins · 7 months ago

Hacks

Hackers sneak crypto wallet-stealing code into a popular AI tool that runs every time

Compromised LiteLLM versions 1.82.7 and 1.82.8 stole SSH keys, cloud creds, Kubernetes secrets, env vars, and crypto wallet material.

1 week ago

Analysis

Why crypto hacks don’t end and continue even when the money is gone

A crypto exploit can empty a wallet in minutes, but the full damage often unfolds for months. Tokens keep falling, treasuries shrink, hiring freezes set in, and projects that survive the theft can still lose their future in the aftermath.

2 weeks ago

Treasury’s $2 trillion stablecoin vision meets a reality check as USD1 depegs

Stablecoins · 1 month ago

Security of the US government’s $28B Bitcoin reserve threatened after weekend theft reveals flaw

Hacks · 2 months ago

Digital “Robin Hood” bots steal from hackers but don’t always give back to the poor

Hacks · 2 months ago

Hundreds of MetaMask wallets drained: What to check before you ‘update’

Wallets · 3 months ago

ADI Chain Announces ADI Predictstreet as FIFA World Cup 2026 Prediction Market Partner

Backed by ADI Chain, ADI Predictstreet will debut on football’s biggest stage as FIFA World Cup 2026’s official prediction market partner.

2 days ago

BTCC Exchange Named Official Regional Partner of the Argentine National Team

BTCC has partnered with the Argentine Football Association through the 2026 FIFA World Cup, linking the exchange’s long-standing crypto presence with one of football’s most decorated national teams.

3 days ago

Encrypt Is Coming to Solana to Power Encrypted Capital Markets

PR · 5 days ago

Ika Is Coming to Solana to Power Bridgeless Capital Markets

PR · 5 days ago

TxFlow L1 Mainnet Launch Marks a New Phase for Multi-Application On-Chain Finance

PR · 5 days ago

BYDFi Marks 6th Anniversary with Month-Long Celebration, Built for Reliability

PR · 5 days ago

Disclaimer

Our writers’ opinions are solely their own and do not reflect the opinion of CryptoSlate. None of the information you read on CryptoSlate should be taken as investment advice, nor does CryptoSlate endorse any project that may be mentioned or linked to in this article. Buying and trading cryptocurrencies should be considered a high-risk activity. Please do your own due diligence before taking any action related to content within this article. Finally, CryptoSlate takes no responsibility should you lose money trading cryptocurrencies. For more information, see our company disclaimers.