Crypto infrastructure providers are under rising pressure as a new lawsuit tests whether technical control can bring legal responsibility after a major hack. The case against Circle could influence how courts treat stablecoin and bridge operators during active breaches.
Lawsuit Alleges Circle Allowed Attackers to Move Stolen Funds
On April 1, 2026, Drift Protocol, a Solana-based decentralized perpetual exchange, suffered a devastating exploit. Attackers used pre-signed administrative transactions prepared weeks earlier to seize governance control and drain approximately $286 million within minutes. According to the lawsuit, the hackers then utilized Circle's USDC stablecoin and its Cross-Chain Transfer Protocol (CCTP) to bridge over $230 million in stolen funds from Solana to Ethereum in more than 100 transactions over eight hours.
The class action complaint, filed on April 14 by Gibbs Mura, A Law Group, alleges that Circle Internet Financial knowingly permitted the attackers—reportedly linked to North Korean government-backed hackers—to offload the illicit proceeds without taking any steps to freeze the funds. The law firm stated: "The lawsuit charges Circle with permitting the attackers to offload $230 million of their spoils over the course of several hours by using Circle's own stablecoin USDC and its blockchain bridge CCTP, instead of freezing the funds." The plaintiffs argue that Circle had both the technical capability and contractual authority to halt the transactions but chose not to act.
Circle's Defense: Legal Constraints vs. Technical Capability
Circle addressed the situation on April 10, emphasizing that freezing USDC is not a unilateral decision but a legal obligation. The company stated: "When Circle freezes USDC, it is not because we have decided, unilaterally or arbitrarily, that someone's assets should be taken from them. It is because the law requires us to act." Circle maintained that USDC operates within established regulatory frameworks, meaning any intervention must be authorized by relevant legal authorities. The firm also pointed to a gap between available technical capabilities and current legal structures, suggesting that faster coordinated responses would require regulatory changes rather than unilateral action by issuers.
Broader Impact on DeFi Ecosystem
The Drift exploit sent shockwaves through the DeFi landscape. The protocol's total value locked collapsed from approximately $550 million to under $250 million, and the DRIFT token lost more than 40% of its value. At least 20 other DeFi protocols reported indirect losses tied to Drift exposure, highlighting the interconnected risks within decentralized finance. Separately, Tether, another major stablecoin issuer, announced a $150 million support plan to stabilize the market, illustrating the diverging crisis response strategies among issuers.
Legal Implications: Redefining Duties of Infrastructure Providers
The central legal question in this case is whether crypto infrastructure providers—such as stablecoin issuers and bridge operators—have an affirmative duty to intervene when they have the technical ability to block stolen funds. If the court finds Circle liable, it could establish a precedent that requires issuers to freeze or block suspicious transactions proactively during active security breaches, or else face significant damages.
The lawsuit remains at an early stage, and the allegations have not been tested in court. Legal experts, however, note that courts are increasingly scrutinizing the responsibilities of intermediaries in the crypto space. The outcome of Circle's case could become a landmark ruling, defining the legal boundary between a passive service provider and an active control point during crises—with far-reaching consequences for the entire crypto industry.