Circle Faces Liability Questions After $230M in Stolen USDC Moved Without Intervention

Investors are questioning Circle’s operational safeguards after the company allegedly allowed over $230 million in stolen USDC to move across blockchains without intervention. The funds were taken during the April 1 hack of Drift Protocol, a Solana-based decentralized exchange, where attackers gained control through pre-signed administrative transactions and drained assets. Circle’s cross-chain transfer system was used to shift the stolen stablecoins from Solana to Ethereum in more than 100 transactions over several hours. According to a class action lawsuit filed April 14, Circle had both the technical ability and contractual authority to freeze the funds but did not do so. That inaction forms the core of the legal claim, which could expose the company to financial liability and reputational harm if courts determine it failed in its duty to prevent illicit flows. Premarket trading reflected the concern: CRCL stock dipped 1%, reversing part of a previous 1.84% gain. The breach, estimated at $280 million, ranks among the largest in 2026 and has already triggered indirect losses across other DeFi platforms. Drift Protocol’s total value locked fell from $550 million to under $250 million, and its native token shed more than 40% of its value. The incident spotlights a broader issue: whether stablecoin issuers like Circle are responsible for policing how their tokens are used post-issuance. Prior incidents cited by the plaintiffs suggest a pattern that could compound regulatory and investor scrutiny. With USDC remaining a cornerstone of cross-chain liquidity, the outcome of this case may shape expectations for oversight in the stablecoin sector. The DRIFT token lost more than 40% of its value following the attack.