Circle, the issuer of USD Coin (USDC), is facing a class action lawsuit brought forth by investors of the decentralized finance (DeFi) platform Drift Protocol. The suit stems from a significant exploit on April 1, which resulted in a loss of approximately $280 million, marking one of the largest DeFi hacks to date.
Key Takeaways
- Circle is being sued by Drift Protocol investors following a $280 million exploit.
- The lawsuit alleges Circle failed to act promptly to freeze stolen USDC associated with the attack.
- Drift Protocol experienced the exploit after an attacker gained unauthorized access and manipulated withdrawal limits.
- Onchain investigators have criticized Circle’s response time in freezing funds that were allegedly transferred to Ethereum via Circle’s cross-chain protocol.
- Circle’s CEO has stated the company only freezes assets under the direction of law enforcement or courts, citing potential ethical concerns with independent action.
The legal action, initiated by the law firm Gibbs Mura, asserts that Circle Internet Financial neglected to swiftly freeze the USDC funds implicated in the attack. According to a statement released by the law firm, “Circle allegedly took no action to freeze the funds, despite having the technical and contractual authority to do so.”
Drift Protocol, a decentralized exchange operating on the Solana blockchain, reported that an attacker gained illicit access to its systems. The perpetrator then introduced a malicious asset and subsequently removed withdrawal restrictions, enabling the draining of platform assets. The severity of the exploit was amplified by the revelation that the individuals responsible had allegedly spent six months impersonating a quantitative trading firm.
Prominent onchain investigator ZachXBT has publicly critiqued Circle’s delay in freezing USDC linked to the exploit. ZachXBT noted that Circle had a six-hour window to freeze the stolen assets, alleging that over $230 million in USDC was moved from Solana to Ethereum using Circle’s cross-chain transfer protocol. The lawsuit further points out that Circle had, on a prior occasion, frozen 16 unrelated wallets in a separate civil case, thereby demonstrating its capacity and willingness to intervene when deemed appropriate.
Potential Regulatory Precedent and Legal Stakes
This class action lawsuit places Circle in a challenging position, raising critical questions about the responsibilities of stablecoin issuers in managing and securing assets within the volatile DeFi ecosystem. The legal stakes are substantial, as the outcome could significantly influence how centralized entities interact with decentralized protocols and the extent of their liability in cases of exploits. The plaintiffs are seeking recourse for financial losses incurred due to the alleged inaction of Circle. This case could set a precedent for future legal challenges against stablecoin issuers and other intermediaries involved in the transfer of digital assets during security incidents. The core of the legal argument hinges on whether Circle possessed the authority and obligation to intervene more proactively, beyond the directives of law enforcement or court orders. This contrasts with the established regulatory frameworks, such as the European Union’s Markets in Crypto-Asset Regulation (MiCA), which are still developing comprehensive guidelines for crypto asset service providers and could be influenced by such litigations in their ongoing evolution. The lack of clear, globally harmonized regulations for DeFi exploits and stablecoin issuer liability makes this case particularly significant for future compliance and legal strategies within the industry.
Circle CEO Jeremy Allaire addressed the situation, asserting that the company’s policy is to freeze USDC wallets only upon the explicit instruction of law enforcement agencies or judicial bodies. Allaire articulated that taking unilateral action in private matters, outside of established legal channels, could create a “significant moral quandary” and set a potentially dangerous precedent. He stated, “If there are others that believe that Circle should just step away from what the law says and do its own, make its own decisions, I think it’s a very risky proposition.”
The Block has reached out to Circle for an official statement regarding the class action lawsuit. In parallel developments, Drift Protocol announced on Thursday that it has secured a proposed recovery package totaling up to $127.5 million from Tether and an additional $20 million from other partners. According to Drift, this package is designed to support user recovery following the exploit and to facilitate the platform’s relaunch as a prominent USDT-based perpetual decentralized exchange on the Solana network.
Source: : www.theblock.co