Major Cryptocurrency Company Entangled in Litigation Following Massive Heist Involving Depleted Funds of Over a Quarter Billion Dollars
A recently filed class-action lawsuit is taking aim at Circle Internet Group, alleging that the company failed to take decisive action in the aftermath of a devastating $280 million exploit of the Drift Protocol on April 1. The lawsuit, brought forth by Drift investor Joshua McCollum on behalf of over 100 affected parties, was filed in a Massachusetts US district court, accusing Circle of facilitating the transfer of approximately $230 million in $USDC from Solana to Ethereum via its Cross-Chain Transfer Protocol (CCTP) without intervention.
According to the lawsuit, Circle's inaction enabled the attackers to perpetrate the heist, with McCollum's attorneys asserting that the company's failure to act in a timely manner directly contributed to the substantial losses incurred. The lawsuit specifically alleges that Circle is guilty of aiding and abetting conversion, as well as negligence, with the law firm representing McCollum and other Drift investors, Mira Gibb, seeking damages, the exact amount of which will be determined during the trial.
The case highlights a significant grey area in the world of cryptocurrency, where companies like Circle, which exert control over user funds, often find themselves in a precarious position when it comes to intervening in situations like this. While such companies may possess the technical capabilities to freeze or intervene, they frequently cite regulatory constraints or a lack of clear legal authority as justification for their inaction, leaving the question of accountability hanging in the balance.
In a notable precedent, Circle had previously demonstrated its ability to freeze assets, having done so just a week prior to the Drift incident in connection with a separate US civil case, where 16 $USDC wallets were frozen. This has led McCollum's lawyers to argue that Circle had the technical capacity to take similar action in this instance.
Meanwhile, crypto analytics firm Elliptic has suggested that the exploit may be the work of North Korean state-backed hackers, who utilized Circle's bridging technology to carry out over 100 transactions during US working hours. The stolen funds were subsequently converted into Ether (ETH) and laundered through the Tornado Cash privacy protocol in an effort to conceal the trail.
The incident has sparked a debate, with some arguing that Circle's decision not to intervene was the correct one, citing concerns over arbitrary discretion and the potential for setting a problematic precedent. ARK Invest's director of research for digital assets, Lorenzo Valente, has come out in support of Circle's decision, positing that freezing funds without a clear legal order could have far-reaching and potentially troubling implications. Valente has also speculated that the stolen funds may ultimately be used to support North Korea's nuclear weapons program, highlighting the complex and nuanced nature of this issue.