Stablecoin Issuer Liability Under Scrutiny as Circle Faces Lawsuit Over $230M Stolen USDC

CircleUSDCDrift Protocolclass actionCCTPNorth Korea hackersTornado Cashcrypto securityon-chain monitoringKYT

Why Is Circle Being Taken to Court?

Stablecoin issuer Circle is facing a class action lawsuit filed in the US District Court for the District of Massachusetts following the April 1, 2025 exploit of Drift Protocol. attackers used Circle's Cross-Chain Transfer Protocol (CCTP) to move approximately $230 million in USDC from Solana to Ethereum. Circle did not intervene or freeze the funds at any point during the transfer. Plaintiffs allege that Circle's inaction amounts to aiding and abetting misappropriation and constitutes negligence.

How Did Attackers Move $230 Million Across Chains?

The method at the center of this case is Circle's own CCTP — an official protocol designed to enable seamless USDC transfers between blockchains. Attackers exploited this infrastructure to rapidly move the stolen funds from Solana to Ethereum without triggering any freeze or block. Because CCTP is operated directly by Circle, plaintiffs argue the company had both the technical capability and the responsibility to halt suspicious transactions — and that its failure to do so is the basis of the legal claim.

Where Did the Funds Go After the Transfer?

Blockchain analytics firm Elliptic tracked the on-chain movement of the stolen assets. After arriving on Ethereum, the USDC was converted into ETH and subsequently routed through Tornado Cash to obscure the trail. Elliptic also noted suspicions that the attack may be linked to North Korea-affiliated hacking groups, a pattern consistent with several other large-scale crypto thefts attributed to state-sponsored actors in recent months.

Where Does Stablecoin Issuer Liability Begin and End?

The central legal question this case raises is whether a stablecoin issuer bears an affirmative duty to intervene when it has the technical means to block stolen funds. Circle has previously frozen USDC addresses in other incidents, which undermines any argument that intervention was impossible. How courts rule on this question will set a significant precedent for the entire stablecoin industry and reshape expectations around the compliance responsibilities of issuers.

Why On-Chain Monitoring Matters More Than Ever

Regardless of the legal outcome, this incident illustrates the critical value of real-time on-chain surveillance. From the initial exploit to the Tornado Cash obfuscation, every step left a traceable on-chain footprint. Trustformer KYT provides real-time monitoring of large cross-chain transfers, mixer interactions, and high-risk address activity — enabling exchanges and compliance teams to detect and respond before funds are fully laundered, delivering the kind of early-warning capability that could make a material difference in cases like this.

About Trustformer

Trustformer is a leading blockchain security and compliance technology company specializing in providing professional risk management and compliance solutions for the global cryptocurrency ecosystem. We have developed the cutting-edge Trustformer KYT (Know Your Transaction) platform, which integrates artificial intelligence, blockchain analytics, and regulatory technology to deliver comprehensive, accurate real-time transaction monitoring, risk assessment, and suspicious activity reporting services.

With deep industry expertise and technological innovation, Trustformer is dedicated to helping Virtual Asset Service Providers (VASPs), crypto financial institutions, and investors build a safer and more transparent crypto financial environment. We believe that driving compliance and trust through technology can contribute to the thriving growth of the global digital economy.