Circle freezes Zama’s USDC contract, locking $12.6M amid rug pull allegations

Circle just demonstrated, once again, that “decentralized finance” has a very visible centralized kill switch. The USDC issuer blacklisted the smart contract address behind Zama’s confidential USDC (cUSDC) product on Ethereum on May 30, freezing roughly 12.6 million USDC in user funds.

The freeze appears tied to a $12.4 million USDC deposit made on May 11 from a wallet associated with Overnight Finance, a project currently facing rug pull allegations from its investors. On-chain investigator ZachXBT flagged the connection, and the market responded predictably: Zama’s native token took a significant hit almost immediately.

What happened, and why it matters

Zama specializes in fully homomorphic encryption, or FHE, a technology that allows computations to be performed on encrypted data without ever decrypting it. Zama had collaborated with Circle in the past, making this freeze feel a bit like getting locked out of your apartment by your own landlord.

The cUSDC product was designed to bring privacy features to USDC holdings on Ethereum. Users could deposit USDC into the contract and receive a confidential version, shielded by Zama’s FHE technology. That privacy layer now sits frozen, with $12.6 million in user funds inaccessible.

Circle has used its blacklisting capability before. The company can unilaterally freeze any USDC held at a specific Ethereum address, a power baked into the USDC smart contract itself. It’s a compliance tool that the firm has deployed in response to law enforcement requests, sanctions violations, and cases of suspected fraud. This is one of the more high-profile instances, though, because it didn’t just freeze one bad actor’s wallet. It froze an entire protocol’s smart contract, catching every user’s funds in the net.

The privacy paradox

The irony here is thick enough to cut with a knife. Zama built its entire value proposition around privacy and confidentiality, using cutting-edge cryptographic techniques to shield on-chain activity. But the foundation of that privacy product was USDC, a stablecoin whose issuer maintains a master key to freeze any balance, anywhere, at any time.

Both Tether and Circle maintain blacklisting capabilities, and both have used them. But the Zama freeze puts the tension into especially sharp relief because the affected protocol was explicitly designed for privacy.

What this means for investors

For anyone holding positions in privacy-focused DeFi projects, this is a case study in dependency risk. Zama’s token price decline following the freeze reflects a market repricing of that risk in real time. If your privacy protocol depends on a centralized stablecoin, your privacy is only as strong as the issuer’s willingness to let it exist.

There’s also the Overnight Finance angle to watch. If the rug pull allegations are confirmed and the $12.4 million deposit is definitively traced to fraudulent activity, Circle’s freeze will look like a responsible compliance action. If the situation is murkier, with Overnight Finance disputing the allegations or the wallet link proving tenuous, then the freeze starts to look like collateral damage inflicted on Zama’s legitimate users.

Either way, $12.6 million in user funds sits frozen with no public timeline for resolution.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.