In a sharp exchange on X on July 3, 2026, prominent blockchain investigator ZachXBT directly confronted Circle CEO Jeremy Allaire over a post reading simply “Integrity matters.”
ZachXBT’s reply—“Stop virtue signaling” to Jeremy—accompanied by screenshots detailing Circle’s inopportune handling of stolen USDC funds during the $280 million Drift exploit, reignited debate over the company’s compliance practices during major incidents involving state-linked actors.
The timing coincides with heightened competition in the stablecoin sector following the recent launch of Open USD (OUSD), a new entrant backed by a consortium including Coinbase, Visa, Mastercard, BlackRock, and over 140 other firms. The interaction highlights persistent questions about centralized issuers’ speed in responding to illicit fund movements versus their public commitments to responsible stewardship.
The X Exchange and ZachXBT’s Critique
Jeremy Allaire, Co-Founder and CEO of Circle Internet Financial—the issuer of the USDC stablecoin—posted “Integrity matters” on his X account around midday UTC on July 3. The brief statement quickly drew replies, with ZachXBT’s response arriving within minutes. The investigator, known for detailed on-chain analysis of hacks, scams, and fund flows, attached two images from his earlier April 2026 posts.
One screenshot outlined how Circle took approximately six hours to freeze stolen USDC bridged via its Cross-Chain Transfer Protocol (CCTP) from Solana to Ethereum across more than 100 transactions during the Drift incident.
The second displayed a table titled “Circle $420M+ — Alleged Compliance Failures,” listing 15 cases spanning 2022–2026. It included the Drift Protocol event (April 2026, ~$232M USDC at risk, labeled “No freeze during 6hr bridge… Attacker linked to DPRK by Elliptic”), alongside other incidents involving protocols like SwapNet, GMX, Cetus, and various DPRK-linked or sanctioned entities where Circle allegedly took minimal, late, or no action.
ZachXBT has long criticized Circle for what he describes as inconsistent or delayed responses to illicit funds, particularly those tied to North Korean state actors. In replies to the latest post, community members amplified the point, with some noting the “internet never forgets” and others highlighting perceived hypocrisy between public statements and operational decisions. The exchange quickly gained traction, underscoring ZachXBT’s role as a vocal watchdog in crypto’s on-chain transparency debates.
The Drift Protocol Exploit and Circle’s Response Policy
The reference to the Drift hack traces back to April 1, 2026, when the Solana-based decentralized perpetuals exchange suffered an exploit. Drift later attributed the attack with medium-to-high confidence to North Korean state-affiliated hackers (linked to groups such as UNC4736 or AppleJeus). The operation involved a sophisticated six-month social-engineering campaign in which attackers posed as a quantitative trading firm, attended conferences, and built trust before compromising security council admin powers.
Attackers rapidly converted drained assets into USDC on Solana and bridged roughly $232 million to Ethereum using Circle’s CCTP in over 100 transactions during U.S. business hours. Critics, including ZachXBT, argued Circle had a window of at least six hours to intervene by blacklisting addresses or freezing funds but did not do so promptly. This inaction, they contend, allowed significant value to exit the ecosystem.
Circle maintains a policy of freezing USDC only upon receipt of valid law enforcement requests or court orders, rather than acting unilaterally. CEO Jeremy Allaire has publicly defended this stance, describing unilateral intervention as creating a “significant moral quandary” and emphasizing the need for clear legal processes to avoid arbitrary decisions. In the wake of the Drift incident, Allaire reiterated that Circle follows established legal channels.
The episode prompted a class-action lawsuit filed in mid-April 2026 by a Drift investor on behalf of affected users, alleging Circle failed to freeze funds during the critical window and thereby contributed to losses. The suit centers on the eight-hour (or six-hour, per some reports) period of fund movement. Circle has faced similar past criticisms, with ZachXBT previously compiling examples of delayed or limited action on illicit USDC flows.
Circle has countered that rapid unilateral freezes carry legal and operational risks, including potential liability and disruption to legitimate users. The company has pointed to successful freezes in other cases when properly authorized.
Nonetheless, the Drift events and ZachXBT’s documentation of cumulative exposure have fueled calls for clearer protocols, faster coordination with projects during incidents, or legislative carve-outs protecting issuers who act in good faith.
OUSD Launch Intensifies Scrutiny on Centralized Issuers
The July 3 exchange unfolds against the backdrop of a rapidly evolving stablecoin market. In early July 2026, the Open Standard consortium launched Open USD (OUSD), positioning it as a collaborative, multi-chain stablecoin alternative.
Backed by major players including Visa, Mastercard, Stripe, BlackRock, Coinbase, and more than 140 other entities across payments, banking, and technology, OUSD emphasizes features such as zero-fee minting in some contexts, reserve yield sharing with partners, and decentralized governance elements.
Coinbase’s involvement in OUSD has drawn particular attention, given its longstanding commercial relationship with Circle (under which Coinbase earns a significant share of USDC reserve income). Reports indicated Circle’s stock price dropped sharply—around 17.5% in one session—following the OUSD news, reflecting investor concerns about competitive pressure on USDC’s market position.
Analysts frame the OUSD entry as turning the stablecoin race into a test of distribution, liquidity, compliance infrastructure, and perceived trustworthiness. Proponents of OUSD highlight its broad institutional backing and collaborative model as potential advantages in global payments and DeFi. Critics and observers question whether any stablecoin can fully escape centralization risks or compliance challenges, especially when handling illicit flows from sophisticated actors like DPRK-linked groups.
Read: The New Stablecoin in Town: How Could OUSD Challenge or Replace USDC?
In this environment, public statements from leaders like Jeremy Allaire on “integrity” invite immediate scrutiny from figures like ZachXBT, who emphasize concrete on-chain outcomes over rhetoric. The Drift incident remains a salient example for those arguing that centralized issuers wield significant power through their ability (or reluctance) to freeze assets, raising questions about accountability, speed of response, and the balance between regulatory caution and user protection.
As the stablecoin sector matures, with regulatory developments, institutional adoption, and new competitors like OUSD, the tension between operational policies and public messaging is likely to persist. ZachXBT’s intervention serves as a reminder that on-chain investigators and affected communities continue to track these dynamics closely, demanding transparency and consistency from major players.
Whether Circle adjusts its approach, seeks legislative clarity, or faces further legal and reputational pressure remains to be seen amid an increasingly competitive landscape.
Also read: Justin Sun’s B.AI Draws Attention Amid Anthropic’s Crackdown on Claude Access Routes from China
