Key Takeaways
- • Circle Internet Group refused to freeze $280 million in USDC stolen by North Korean hackers from a crypto exchange on April 1, citing a policy requiring legal compulsion from authorities rather than unilateral action; Tether took the opposite approach by freezing $344 million in USDT in coordination with U.S. government authorities three weeks later.
- • A Massachusetts class action lawsuit argues Circle's freeze capability creates a higher anti-money-laundering duty than traditional banks face under the Bank Secrecy Act, raising the question of whether stablecoin issuers will be forced into real-time fund freezing obligations that no legacy financial institution currently maintains.
- • Circle's Chief Strategy Officer Dante Disparte stated the company freezes funds only when "legally compelled by an appropriate authority, through lawful process," establishing a legal-order-first standard that directly contrasts with Tether's more proactive compliance posture.
- • The dispute between Circle and Tether's approaches creates regulatory uncertainty for traditional banks considering stablecoin partnerships, as stricter liability standards could fundamentally alter the compliance burden for financial institutions entering the crypto stablecoin market.
Summary
On April 1, North Korean hackers executed a $280 million theft from a crypto exchange and spent the subsequent eight hours routing stolen funds through Circle Internet Group's USDC stablecoin network. Despite possessing the technical and contractual authority to freeze tokens at any wallet address—power explicitly granted in its user terms "in its sole discretion"—Circle chose not to intervene during the active theft or its immediate aftermath.
Circle's restraint contrasts sharply with competitor Tether Holdings. Three weeks after the North Korean heist, Tether announced it had coordinated with the U.S. government to freeze $344 million in USDT across two wallets flagged for illicit activity. This marked one of the stablecoin issuer's largest compliance actions on record and signaled a fundamentally different operational philosophy regarding fund seizures and regulatory cooperation.
When questioned about Circle's knowledge of the "Drift attack" as it unfolded, a company spokesperson declined comment citing ongoing litigation but pointed to an April 10 blog post by Circle Chief Strategy Officer Dante Disparte. The post established Circle's formal position: freezing occurs only when the company is "legally compelled by an appropriate authority, through lawful process." This legal-order-first framework prioritizes judicial due process over unilateral executive action, even when the issuer possesses technical capability to act independently.
The competing approaches have triggered regulatory scrutiny. A Massachusetts class action lawsuit argues that Circle's freeze capability implicitly creates a heightened anti-money-laundering duty exceeding the obligations imposed on banks under the Bank Secrecy Act. If regulators side with Tether's more aggressive posture, stablecoin-issuing or stablecoin-partnering banks could face unprecedented real-time fund-freezing obligations—a duty traditional financial institutions have never been required to maintain. Columbia Business School adjunct professor Omid Malekan defended Circle's approach, cautioning that if issuers freeze beyond legal requirements, "not only is code not law, but also law is not law"—articulating concerns that voluntary overreach by private entities could undermine legal frameworks themselves.
For institutional investors and financial institutions evaluating stablecoin exposure or partnership opportunities, this regulatory divergence represents material compliance and liability risk. The outcome of pending litigation and regulatory guidance will likely determine whether stablecoin infrastructure demands custodial-grade real-time monitoring and seizure capabilities or whether legal-process-based freezing remains the compliance standard.
Circle's restraint contrasts sharply with competitor Tether Holdings. Three weeks after the North Korean heist, Tether announced it had coordinated with the U.S. government to freeze $344 million in USDT across two wallets flagged for illicit activity. This marked one of the stablecoin issuer's largest compliance actions on record and signaled a fundamentally different operational philosophy regarding fund seizures and regulatory cooperation.
When questioned about Circle's knowledge of the "Drift attack" as it unfolded, a company spokesperson declined comment citing ongoing litigation but pointed to an April 10 blog post by Circle Chief Strategy Officer Dante Disparte. The post established Circle's formal position: freezing occurs only when the company is "legally compelled by an appropriate authority, through lawful process." This legal-order-first framework prioritizes judicial due process over unilateral executive action, even when the issuer possesses technical capability to act independently.
The competing approaches have triggered regulatory scrutiny. A Massachusetts class action lawsuit argues that Circle's freeze capability implicitly creates a heightened anti-money-laundering duty exceeding the obligations imposed on banks under the Bank Secrecy Act. If regulators side with Tether's more aggressive posture, stablecoin-issuing or stablecoin-partnering banks could face unprecedented real-time fund-freezing obligations—a duty traditional financial institutions have never been required to maintain. Columbia Business School adjunct professor Omid Malekan defended Circle's approach, cautioning that if issuers freeze beyond legal requirements, "not only is code not law, but also law is not law"—articulating concerns that voluntary overreach by private entities could undermine legal frameworks themselves.
For institutional investors and financial institutions evaluating stablecoin exposure or partnership opportunities, this regulatory divergence represents material compliance and liability risk. The outcome of pending litigation and regulatory guidance will likely determine whether stablecoin infrastructure demands custodial-grade real-time monitoring and seizure capabilities or whether legal-process-based freezing remains the compliance standard.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.