ZachXBT Raises Concerns Over Compliance Gaps And Delayed Responses

Circle is facing fresh criticism, and this time it’s coming from within the crypto investigation space.

The issue started gaining attention after on-chain investigator ZachXBT shared a thread accusing the company of missing several opportunities to freeze illicit USDC flows over the past few years.

At the center of it all is a simple but uncomfortable question, how effective is Circle when it comes to stopping bad actors in real time?

Over $420 Million In Illicit Flows Reportedly Unchecked

According to ZachXBT’s breakdown, more than $420 million worth of suspicious or illicit USDC transactions have not been frozen since 2022.

That’s not a small number, and it’s part of what’s fueling the current backlash.

The concern isn’t just that these transactions happened, but that they allegedly moved through systems connected to Circle without being stopped. For a company that emphasizes compliance and control, that gap is now being questioned.

ZachXBT didn’t frame this as a general criticism either. His thread points to specific cases where intervention might have been possible, but didn’t happen in time.

And in crypto, timing really matters, once funds are moved across chains or mixed through different platforms, tracing and recovery becomes a lot harder.

Drift Protocol Exploit Adds More Weight To The Claims

One of the biggest examples being discussed is the exploit involving Drift Protocol.

The attack, which has been linked to the Lazarus Group, reportedly saw over $232 million in USDC moved through Circle-linked infrastructure.

What makes this case stand out is how long the activity lasted. Reports suggest the funds were bridged over a six-hour period, and this happened during U.S. business hours.

Still, no freeze was triggered during that window.

For critics, that detail is hard to ignore. Six hours is not exactly instant movement, and many believe earlier action could have slowed things down or limited the damage.

There are also mentions of a broader $285 million exploit tied to the same situation, which just adds to the scale of the issue.

Legitimate Wallet Freezes Create A Contrast

While these incidents were happening, another development added to the frustration.

In March 2026, Circle reportedly froze 16 wallets linked to what has been described as legitimate business activity, tied to a civil case.

That contrast is what people are focusing on now.

On one side, large amounts of allegedly illicit funds move without being stopped. On the other, wallets connected to lawful activity get restricted.

It’s not necessarily that freezes are wrong, most people understand why they exist. But the inconsistency in timing and targeting is what’s raising eyebrows.

ZachXBT pointed this out directly, questioning whether Circle’s compliance priorities are aligned with where the biggest risks actually are.

Bigger Questions Around Stablecoin Control

This situation is also feeding into a wider debate about centralized stablecoins in general.

USDC, unlike some other crypto assets, can be frozen by its issuer. That gives Circle a certain level of control, which regulators tend to see as a positive.

But it also creates expectations.

Users expect quick responses when hacks happen. They expect systems to catch large suspicious flows, especially when they happen over several hours.

When those expectations aren’t met, it leads to situations like this, where people start questioning how the system really works behind the scenes.

At the same time, it’s worth noting that tracking and stopping illicit activity in real time isn’t easy. Transactions can move quickly, across multiple chains and platforms, sometimes in ways that are deliberately designed to avoid detection.

Still, the expectation remains that major issuers should be able to respond faster, especially in high-value cases.

Interestingly, ZachXBT made it clear that he still holds USDC himself.

That detail matters, because it shows this isn’t coming from someone completely against the asset or the company. It’s more of a critical take from someone who actually uses it.

His main concern seems to be about alignment, whether Circle’s actions match the scale of losses the crypto space continues to experience from hacks and exploits.

Right now, based on the examples he shared, he doesn’t seem convinced that they do.

And that kind of feedback tends to carry weight, especially coming from someone known for tracking on-chain activity closely.

Circle Faces Growing Scrutiny Moving Forward

For Circle, this situation could turn into a bigger reputational challenge if it’s not addressed clearly.

The combination of missed freezes, high-profile exploits, and actions against legitimate wallets is creating a narrative that’s hard to ignore.

Whether the company responds with changes to its compliance processes or simply provides more transparency remains to be seen.

But one thing is already happening, people are paying closer attention.

In a space where trust and timing matter a lot, even a few hours of delay can become a major talking point. And right now, that’s exactly what’s happening.

For better or worse, this isn’t just about one incident anymore. It’s turning into a broader conversation about how control, responsibility, and execution come together in the stablecoin ecosystem.

Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services.

Follow us on Twitter @nulltxnews to stay updated with the latest Crypto, NFT, AI, Cybersecurity, Distributed Computing, and Metaverse news!