Learn why open systems need lawful accountability, shared security, and rules that keep pace with threats.
Learn why open systems need lawful accountability, shared security, and rules that keep pace with threats.
On April 1, the Drift Protocol experienced a significant exploit, with publicly reported losses exceeding $270 million. In the hours and days that followed, the digital asset ecosystem did what it always does in these moments: it watched, it reacted, and it debated. Some called for more controls. Others warned against overreach. Both instincts are right — and the tension between them is exactly where the most important policy work for crypto and open internet financial systems are playing out. There is much work to be done, and the U.S. The Department of the Treasury is wasting no time in critical rulemaking for the GENIUS Act, including on financial integrity norms for stablecoins.
The Power to Freeze Is Not the Power to Police
Let me be clear about something that is frequently misunderstood: when Circle freezes USDC, it is not because we have decided, unilaterally or arbitrarily, that someone's assets should be taken from them. It is because the law requires us to act.
USDC is a regulated financial instrument, issued under U.S. and EU laws, and Circle operates accordingly. Our ability to freeze funds is a compliance obligation — exercised only when we are legally compelled by an appropriate authority, through lawful process. This is not a backdoor. It is not algorithmic surveillance. It is what the rule of law looks like in the context of internet-native financial activity, where open access is a feature not a bug.
This distinction matters enormously — not just as a matter of policy, but as a matter of principle. The same framework that allows us to act when compelled is the same framework that protects every USDC holder from arbitrary or politically motivated interference. Privacy and digital property rights are not casualties of compliance. These are design requirements. We are deeply mindful that the power to freeze is also the power to chill, which is precisely why we have built our policies to be appropriately tailored, legally grounded, and resistant to arbitrary overreach. For this reason, USDC and Circle’s overall approach to open financial systems is the ultimate commitment to developers, builders, and world-scale financial access.
This is what separates regulated payment stablecoins from unregulated alternatives — not just the technical architecture, but the accountability architecture that surrounds it.
No Single Chokepoint Can Carry the Weight
The crypto market was built on the premise of permissionless innovation. That openness is genuinely one of its greatest strengths. But openness without accountability is not a feature — it is a vulnerability.
When bad actors exploit a protocol, they do not just steal funds. They test the resilience of the entire system. They probe for the gaps between layers — between the wallets and the protocols and the exchanges, between the exchanges and the issuers, between the issuer and the regulator. And in those gaps, they move fast. Premature or uninformed policy or regulatory attempts to close the crypto value chain — from the fight to preserve self-hosted wallets, to preserving open blockchains and permissionless DeFi innovation, risk imperiling the entire system.
Depth of defense is the answer, and it requires every participant in the stack — protocols, wallet providers, crypto infrastructure, exchanges, and stablecoin issuers — to treat security and accountability as shared obligations, with appropriate legal, privacy, and property rights enshrined throughout. For example, DeFi protocols and open platforms can develop technological circuit breakers, similar to market halting mechanisms used in traditional markets, that halt activity under certain conditions. With the complex and ever-evolving nature of cybersecurity threats — including social engineering and physical security risks often carried out by nation-state actors — these technological protections can equally protect openness, while safeguarding users and platform integrity.
Circle stands ready to support recovery and accountability efforts with ecosystem participants, and with law enforcement, to the fullest extent the law permits. Good technology should not be a vehicle for bad outcomes. This important work is ongoing from the Tornado Cash freezing by OFAC, in which many in crypto accused the government of overreacting, to the most recent (and sadly not the last) incident, with the Drift Protocol, in which market participants will be accused of under-reacting. The truth is security, transparency, and accountability are foundational rather than optional.
The Gap Between Law and Speed Is a Policy Problem
Here is where, notwithstanding technological capabilities, the policy opportunity lies: the tools to intervene more rapidly exist. The legal frameworks that would authorize faster, more coordinated action — while meaningfully preserving property rights and privacy protections — do not yet fully exist. That gap is not an accident. It is the predictable result of regulation that has not kept pace with the technology it governs.
This is a policy problem. And policy problems have policy solutions.
Circle is actively engaged with policymakers in the U.S. and internationally to develop safe harbor frameworks and modernize regulations to meet the moment — legal structures that would allow issuers, exchanges, and ecosystem participants to act more decisively in response to illicit activity, without creating new vectors for overreach or abuse that could imperil the very openness we have fought so hard to protect. The goal is not a system where private companies unilaterally decide who loses access to their assets. The goal is a system where legally sanctioned, rights-preserving interventions can happen at the speed of the threat. In short, we cannot let good technologies get co-opted by bad actors.
The ongoing development of U.S. stablecoin legislation — including the GENIUS Act and broader market structure rules under the CLARITY Act — represent a genuine opportunity to codify these standards before the next major incident forces a capitulation of open systems as unsafe and unfit to be the backbone of the global economy. We intend to use every available channel to ensure the frameworks being written today reflect both the risks we face and the values we are unwilling to compromise: due process, property rights, and the presumption that financial privacy is worth protecting.
What This Moment Requires
Open financial systems will be tested. That is not a reason to close them. It is a reason to build them better — with accountability by design, with legal frameworks that move at the speed of the threat, and with an ecosystem culture that treats the integrity of the system as a matter of collective defense. The inherent antifragility of the crypto market and the technology that underpins it is about constant improvement, collective vigilance, and ensuring that no single event, risk or exploit brings down the entire system.
