Circle Facing Class Action Lawsuit Over $230 Million Drift Protocol Exploit

Circle Internet Group is the target of a class action lawsuit filed in a Massachusetts district court, alleging the company failed to prevent the transfer of stolen assets following a $280 million exploit of the Drift Protocol on April 1. The legal action, led by investor Joshua McCollum on behalf of over 100 members, claims Circle was negligent in allowing approximately $230 million in USDC to be moved from the Solana network to Ethereum. The plaintiffs allege that the transfers occurred via Circle’s Cross-Chain Transfer Protocol (CCTP) over several hours without intervention. Attorneys for the investors argue that Circle permitted the criminal use of its technology and that the losses would have been substantially reduced had the company taken timely action to freeze the assets. To support the claim of technical capability, the lawsuit points to a separate incident a week prior to the hack, where Circle froze 16 USDC wallets in connection with a sealed US civil case. The suit specifically accuses the firm of negligence and aiding and abetting the conversion of stolen funds. External analysis from crypto firm Elliptic suggests the exploit was orchestrated by North Korean state-backed hackers. The stolen funds were reportedly converted to Ether and routed through the Tornado Cash privacy mixer to obscure the audit trail. The case highlights a critical legal grey area regarding the responsibilities of centralized stablecoin issuers. While some industry observers, including ARK Invest, argue that freezing funds without a formal legal order would be an arbitrary exercise of power, the outcome of this trial could redefine the liability of infrastructure providers in the decentralized finance ecosystem.