Circle Hit With Class Action Over $280 Million USDC Theft Response

Circle’s got a problem. A big one.

The stablecoin giant faces a class action lawsuit over what plaintiffs call a botched response to a massive Drift protocol exploit. Gibbs Mura, the law firm behind the case, says Circle sat on its hands while $280 million in stolen USDC stayed accessible to whoever grabbed it. The complaint paints a picture of a company that didn’t move fast enough when speed mattered most. And now Circle’s silence on the whole thing isn’t helping.

What Went Down With Drift

The Drift protocol exploit hit hard. Someone walked away with $280 million in USDC, and the clock started ticking immediately. But according to the lawsuit, Circle didn’t freeze those funds quickly enough. That’s the core allegation here. The plaintiffs say Circle had the ability to lock down the stolen stablecoin but chose not to act with the urgency the situation demanded. USDC operates differently from decentralized cryptocurrencies—Circle can actually freeze tokens tied to specific addresses. It’s done this before in other cases involving law enforcement requests and sanctions compliance.

The lawsuit argues Circle’s delay made things worse. Way worse. While the company apparently deliberated or followed whatever internal procedures it had, the stolen funds remained liquid. That meant whoever had them could potentially move them, swap them, or funnel them through mixers and exchanges. Every hour that passed without action gave the exploiter more options. The plaintiffs think a faster response could’ve prevented at least some of the damage from spreading.

Gibbs Mura didn’t hold back in framing this as negligence. The firm’s taking the position that Circle had both the technical capability and the responsibility to act immediately. Stablecoin issuers occupy a weird space in crypto—they’re centralized entities managing assets that move through decentralized networks. That centralization comes with power. And power, the lawsuit seems to say, comes with obligations.

Circle Stays Quiet

Circle hasn’t said anything publicly about the lawsuit yet. No statement. No blog post. Nothing on social media from executives. That silence is pretty loud right now, especially as the crypto community watches how this unfolds. The company’s built its reputation partly on being a regulated, compliant stablecoin issuer—the kind of outfit that works with regulators and follows rules. But staying quiet during a lawsuit about crisis response? That’s raising eyebrows.

The absence of a defense strategy, at least publicly, leaves a lot of questions hanging. Did Circle have protocols in place for this kind of exploit? If so, were they followed? If not, why not? And if the protocols were followed but still resulted in this delay, were the protocols themselves inadequate? These are the things the court’s probably going to dig into as the case moves forward.

Legal experts tracking the case see it as a potential turning point for how stablecoin issuers handle security breaches. The outcome could set expectations—maybe even legal standards—for response times and decision-making processes when exploits happen. Circle’s not just defending itself here. It’s kind of defending the whole model of centralized stablecoin governance, whether it wants to or not. Market participants tracking Tether Backs Stablecoin Infrastructure Push With will find additional context here.

The plaintiffs want the court to examine Circle’s internal decision-making during those critical hours after the Drift exploit. Who made the call to wait? What information were they working with? What procedures, if any, slowed things down? The lawsuit suggests Circle’s bureaucracy or risk-aversion got in the way of doing the right thing fast.

Industry observers are watching this closely. Stablecoin freezes aren’t rare—Circle and other issuers have frozen funds before, usually at the request of law enforcement or to comply with sanctions. But those situations typically involve clear legal directives. The Drift case sits in murkier territory. No government agency apparently ordered Circle to freeze the funds immediately. So the lawsuit’s really asking: should Circle have acted anyway?

What Happens Next

The court’s going to have to sort through Circle’s obligations during a fast-moving exploit. That’s not simple. Class action lawsuits move slowly, and this one’s just getting started. Discovery could reveal internal communications at Circle during the exploit—emails, Slack messages, meeting notes. That stuff might show whether Circle agonized over the decision or simply followed standard procedures that turned out to be too slow.

Gibbs Mura’s betting the evidence will show negligence. Circle’s presumably betting it followed reasonable protocols given the information available at the time. Both can’t be right. The financial stakes are huge—$280 million huge—and the reputational stakes might be even bigger for Circle. USDC competes directly with Tether’s USDT, and trust is basically the whole game in stablecoins.

The lawsuit also raises uncomfortable questions about centralization in crypto. Circle’s ability to freeze funds is exactly what makes USDC appealing to institutions and regulators. But it’s also what makes situations like this possible. If Circle can freeze funds, should it freeze funds whenever there’s an exploit? What’s the threshold? Who decides? The Drift case might force answers to questions the industry’s been avoiding. This development aligns with Bitcoin Holds Market Share But Traders, highlighting broader market trends.

No timeline yet for when the court might rule on anything substantive. Class actions grind through preliminary motions, discovery, and potentially settlement talks before anything gets decided. Circle could settle quietly to make this go away. Or it could fight, arguing it acted reasonably under the circumstances. Either way, the case isn’t going away quickly.

The crypto industry’s had plenty of exploit stories, but this one’s different because it targets the response, not just the hack itself. Gibbs Mura’s basically arguing that Circle had a duty to act faster and failed. Whether that duty actually exists in law? Unclear. Whether it should exist? That’s what this case might decide.