Circle's USDC Stablecoin Under Fire After $230M Stolen Funds Flow Unimpeded

Circle's USDC stablecoin is facing intense criticism after a recent exploit on the Solana-based Drift Protocol saw $230M in stolen funds flow unimpeded through Circle's proprietary bridge. The incident has raised questions about the inconsistencies in centralized control within permissionless markets and the potential risks for users, protocols, and regulators.

The attack on Drift, which was one of the largest DeFi hacks of 2026, involved a highly sophisticated weeks-long operation that compromised the protocol's Security Council. The attackers exploited a mechanism known as a 'Durable Nonce' to gain necessary multisig approvals and then shifted admin authority, initialized a fake asset, and borrowed against false collateral.

The incident has highlighted the tension between centralized control and permissionless systems in crypto markets. Circle's decision not to intervene during the exploit stands in stark contrast to its aggressive asset freeze tied to a sealed US civil case just days prior.