Circle Internet Group faces class action lawsuit over Drift Protocol exploit funds

The club has been accused of failing to block exploitative transfers. Approximately $230 million in stolen funds were transferred through Circle's USDC. Drift plans to repurchase $147.5 million, backed by future earnings.

Circle Internet Group, the provider of the USDC stablecoin, is facing a class-action lawsuit alleging that it failed to stop activities related to the exploitation of the stolen funds, the Drift Protocol.

The lawsuit, filed in US District Court in Massachusetts by Drift investor Joshua McCollum on behalf of more than 100 users, focuses on the company's ability and duty to intervene when the exploits are taking place.

The charges target the circle's role in fund transfers.

The legal action stems from the April 2026 breach of Drift Protocol, a Solana-based decentralized exchange, in which attackers spent about $285 million.

A significant portion of those funds, estimated at around $230 million, were quickly converted into USDC.

Since then, the funds have been transferred on-chain, mainly from Solana to Ethereum using the on-chain infrastructure.

The transfers were not instantaneous. They happened within several hours and more than 100 transactions were paid.

This list is placed in the center of the charge.

Plaintiffs argue that there was a window of opportunity to file a circular action.

According to the claim, the company may limit the damage by freezing the affected wallets or stopping the transfers. Instead, the funds continue to move until they are fully accessible.

The lawsuit accuses Circle of negligence and consequential damages for failing to act despite having the technical ability to do so.

This argument suggests that in the past, the company has frozen wallets linked to illegal activity, which suggests that interception is not only possible, but already part of the processing toolkit.

At its core, the lawsuit raises a serious question: Where does responsibility begin and end for a centralized entity operating in a decentralized system?

Drift recovery plan

In response to the exploit, Drift Protocol outlined a structured recovery plan aimed at mitigating user losses by rebuilding platform liquidity and operations.

The protocol is looking to raise up to $147.5 million, with a large portion funded by Tether and other ecosystem partners.

But this figure should not be seen as a quick fix.

A large portion of the funds is an income-related credit facility valued at around $100 million.

This means that the protocol collects funds over time and pays them using future trading fees and platform income instead of distributing the entire amount up front.

To manage user claims, Drift plans to issue a new recovery token, although its official name and final structure are yet to be confirmed.

This token is distributed to affected users and represents their share of the recovery pool.

It is expected to be transferable, allowing users to either hold it and expect gradual payments or sell it to secondary markets at a discount.

The recovery pool itself will not depend only on external financial support.

It is designed to be constantly replenished by multiple sources, including protocol revenue, partner contributions, and potential funds from attackers.

This creates a system where payment is directly tied to the platform's ability to relaunch and generate consistent marketing activity.

Despite these measures, there is a clear shortage.

With losses estimated at nearly $285 million and recovery efforts of up to $150 million, most consumer funds will not be covered immediately.

This loophole highlights that users may not be fully recovered in the near term, and recovery depends heavily on Drift's long-term performance.

Part of the recovery framework is focused on restoring liquidity to support recovery.

Once the platform is fully operational, incentives and funding are being directed at market makers to build order books and improve trading conditions.

Without enough liquidity, even a technically sound reboot would struggle to draw users back.

Another major change is the protocol's decision to move away from USDC as its main settlement resource and instead accept USDT.

This change comes after approximately $230 million of the looted funds were converted to USDC and moved off-chain during the exploit.

The switch reflects a reassessment of risk and a broader effort to restructure the platform's core infrastructure following the incident.

Generally, a drift recovery plan is built on gradual recovery rather than immediate payments.

Its success depends on how quickly the platform regains user trust, restores liquidity and generates enough revenue to sustain long-term payments.