USDC Issuer Circle Accused of ‘Profiting’ From Lazarus Group Hack

USDC issuer Circle faced accusations of profiting from Lazarus Group hack after delaying blacklisting funds linked to the North Korean hackers.
By Kelvin Munene Murithi
Updated September 4, 2025
Circle’s USDC Dominance Could Be Bearish for Crypto Market, Here’s Why

Highlights

  • ZachXBT accused Circle of profiting from Lazarus Group by delaying blacklisting hacked funds by 4.5 months.
  • Four stablecoin issuers blacklisted two addresses holding $4.96 million tied to the North Korean hackers.
  • Crypto exchanges froze an additional $1.65 million, bringing the total frozen funds to $6.98 million from the hackers.

USDC issuer Circle is facing serious accusations after blockchain sleuth ZachXBT called out the company for allegedly ‘profiting’ from transactions linked to the North Korean hacker group Lazarus. ZachXBT, known for his investigative work in the Web3 space, took to social media platform X to criticize Circle and its CEO Jeremy Allaire. The criticism came in response to failure of blacklisting wallets involved in illicit activities in a timely manner.

Advertisement
Advertisement

USDC Issuer Faces Backlash

According to ZachXBT, Circle delayed blacklisting funds associated with the Lazarus Group by 4.5 months compared to other major stablecoin issuers. He also expressed frustration with Circle’s apparent lack of action in preventing the group from using its platform for money laundering.

“Not once have you ever blacklisted after a DeFi exploit/hack when there was ample time, while you continue to profit off the transactions,” ZachXBT wrote. These accusations come after the USDT issuer, along with other stablecoin issuers, blacklisted two wallet addresses linked to Lazarus Group.

The group, notorious for its involvement in numerous crypto hacks, is suspected of carrying out a recent exploit on the Indonesian crypto exchange Indodax. The hack occurred on September 11. This fiasco led to the theft of more than $20 million from the exchange, prompting it to shut down temporarily while it assessed the damage.

Later, the Indodax exchange reopened for transactions, with deposit, withdrawal, and staking services being restored gradually. ZachXBT’s findings revealed that four major stablecoin issuers have blacklisted two addresses associated with the Lazarus Group. These include Tether, Circle, Paxos, and Techteryx.

These wallets hold a combined $4.96 million, spread across multiple stablecoins, including USDT, USDC, BUSD, and TUSD. Additionally, $1.65 million belonging to the hackers has been frozen by various crypto exchanges as part of an ongoing investigation. Hence, in total, $6.98 million has been frozen from the wallet addresses connected to the group.

Advertisement
Advertisement

Brief History of Lazarus Group’s Attacks

Furthermore, this is not the first time the Lazarus Group has been linked to large-scale crypto thefts. ZachXBT previously reported that the North Korean hackers laundered around $200 million from various exploits into stablecoins like USDT and USDC between 2020 and 2023.

Moreover, this recent incident continues to highlight the role stablecoins play in money laundering schemes within the crypto domain. Meanwhile, other stablecoin issuers have taken more proactive steps to combat illicit activity.

Tether recently partnered with Tron and TRM Labs to form the T3 Financial Crime Unit, a task force dedicated to fighting fraud and other illegal activities involving USDT. According to Tether, the T3 unit has already frozen more than $12 million in USDT tied to scams and fraudulent operations.

The USDC issuer has not yet responded directly to ZachXBT’s accusations. On the other hand, discussions on stablecoin regulation and anti-money laundering efforts are intensifying. This comes amid rising concerns over the use of digital assets for illegal activities by state-backed hacker groups like Lazarus.

Advertisement
Kelvin Munene Murithi
Kelvin Munene is a crypto and finance journalist with over 5 years of experience, offering in-depth market analysis and expert commentary . With a Bachelor's degree in Journalism and Actuarial Science from Mount Kenya University, Kelvin is known for his meticulous research and strong writing skills, particularly in cryptocurrency, blockchain, and financial markets. His work has been featured across top industry publications such as Coingape, Cryptobasic, MetaNews, Cryptotimes, Coinedition, TheCoinrepublic, Cryptotale, and Analytics Insight among others, where he consistently provides timely updates and insightful content. Kelvin’s focus lies in uncovering emerging trends in the crypto space, delivering factual and data-driven analyses that help readers make informed decisions. His expertise extends across market cycles, technological innovations, and regulatory shifts that shape the crypto landscape. Beyond his professional achievements, Kelvin has a passion for chess, traveling, and exploring new adventures.
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.