Circle, the issuer of the USDC stablecoin, is facing a class action lawsuit related to the April 1 exploit of the Drift Protocol, in which attackers stole approximately $280 million. The plaintiffs allege that Circle possessed both the technical capability and the contractual authority to freeze the USDC transactions but failed to do so during a critical eight-hour window. During this period, the stolen funds were moved from the Solana blockchain to Ethereum using Circle's own Cross-Chain Transfer Protocol (CCTP).

The complaint, filed in Massachusetts by Drift investors represented by the law firm Gibbs Mura, contends that Circle's inaction occurred despite the transfers taking place during standard U.S. business hours. Following the incident, the Drift Protocol temporarily suspended deposits and withdrawals. Circle CEO Jeremy Allaire has previously stated the company's policy is to freeze assets only when directed by law enforcement or a court order.

This lawsuit underscores the increasing regulatory and legal scrutiny facing stablecoin issuers regarding their responsibilities during cross-chain security breaches. The rapid movement of stolen funds across different blockchain networks presents significant new challenges for asset recovery and determining liability within the decentralized finance (DeFi) ecosystem.