Surge Group
Apr 20, 2026
The Drift Hack
Others
What Happened and What Didn’t Happen
A week after the Drift hack, $285M is still gone.
But the more troubling issue is not the hack itself, but the events surrounding it.
Nine days before, Circle froze 16 legitimate business wallets over a civil case. There was no hesitation, no delay, and action was taken immediately.
Approximately $232 million in stolen USD Coin was transferred through the company’s own infrastructure, spanning more than 100 transactions over a six-hour period, during US business hours.
No assets were frozen.
This was not due to a lack of technical capability, but rather a matter of policy. Circle later stated that it intervenes only when there is a legal obligation to do so.
This is not an isolated case.
On-chain data indicates a recurring pattern across at least 15 incidents since 2022, involving more than $420 million in stolen funds. In each instance, the technical ability to intervene was present, yet action was not taken in the absence of a legal requirement.
This highlights a broader structural reality within decentralized finance.
While DeFi is often positioned as permissionless and autonomous, key components of its infrastructure, including stablecoins, bridging mechanisms, and settlement layers, remain centrally controlled. These entities have the capacity to act, but intervention appears to be conditional rather than automatic.
This difference matters. It is not a question of whether action was possible, but whether there was a willingness to act. In this case, the evidence suggests there was no willingness to act.
What This Means
Much of crypto still relies on centralized infrastructure, and with that comes defined rules, limitations, and discretion. These systems are not entirely neutral, nor are they designed to operate without intervention thresholds.
So, when do they actually step in? At present, the pattern is clear
Legal obligation leads to action
In the absence of it, no intervention follows
The tools were there, there was time to act, and nothing happened, and that’s what anyone building, investing, or operating in this space should be paying attention to.
