The USDC stablecoin issuer Circle Internet Group finds itself entangled in significant legal controversy. A class action complaint lodged Wednesday in Massachusetts district court alleges the company remained passive as cybercriminals transferred approximately $230 million in USDC in the aftermath of 2026’s most devastating cryptocurrency thefts.
Circle Internet Group, CRCL
Drift Protocol suffered the security breach on April 1, with perpetrators extracting roughly $280 million from the decentralized finance ecosystem. The subsequent events — as detailed in the legal filing — involved an extended timeframe where Circle purportedly observed cross-blockchain fund movements without intervention.
Joshua McCollum, the primary plaintiff and Drift Protocol stakeholder, initiated proceedings representing over 100 affected parties. The legal document charges Circle with negligence and complicity in enabling the unauthorized fund conversion.
Cybercriminals exploited Circle’s proprietary Cross-Chain Transfer Protocol infrastructure to transfer pilfered USDC between Solana and Ethereum networks. Legal representatives contend Circle possessed both technical resources and contractual authorization to immobilize the compromised wallets — yet declined to act.
Law practice Mira Gibb serves as counsel for McCollum and fellow claimants. Final compensation amounts await trial determination.
The complaint highlights telling context: approximately one week prior to the Drift incident, Circle froze 16 USDC addresses connected to a confidential US civil proceeding. This precedent, plaintiffs maintain, demonstrates Circle’s operational capacity and previous willingness to intervene — raising questions about selective enforcement.
Circle has remained silent regarding the litigation. Cointelegraph’s outreach for statement yielded no immediate response.
ARK Invest’s digital assets research director, Lorenzo Valente, offered perspective supporting Circle’s restraint. He contended that immobilizing assets absent judicial authorization establishes troubling precedent — effectively granting private entities unchecked discretion over account freezes.
Following cross-chain migration, the compromised USDC underwent conversion to Ether before routing through Tornado Cash, the transaction obfuscation protocol, to eliminate traceability.
Blockchain intelligence provider Elliptic attributes the operation to North Korean state-affiliated cybercriminal networks. Elliptic documented that perpetrators executed over 100 separate transactions through Circle’s bridging infrastructure during standard US operating hours.
The Drift Protocol compromise eliminated substantial platform liquidity and triggered cascading effects throughout interconnected DeFi protocols.
CRCL stock registered a 1.84% movement in response to the developments.
The post Circle (CRCL) Stock Targeted in Class Action Over $280M Drift Protocol Breach appeared first on Blockonomi.


