Circle Freezes Zama's cUSDC Wrapper, Locking $12.6M in User Funds

The Blacklist and Its Scope

Circle added Zama's cUSDC wrapper token to its blacklist on Ethereum after receiving a court-ordered restraining order, rendering the token non-transferable and preventing redemptions. The action froze $12.6 million in USDC that users had deposited into Zama's pooled confidential contract. Depositors cannot withdraw their funds or move the cUSDC token to another address.

Collateral Damage Without Direct Liability

Zama, which provides privacy infrastructure for confidential smart contracts, is not a named defendant in the underlying legal matter. However, every depositor in Zama's pooled contract has been locked out of their funds as a side effect of the court order targeting assets within the contract. This arrangement means users bear the financial consequence of a dispute in which neither they nor the protocol team are parties to the lawsuit.

Industry Context

The incident illustrates a structural vulnerability in wrapped-token designs: a blacklist action by the underlying stablecoin issuer can freeze all funds in dependent protocols simultaneously, regardless of whether those protocols or their users are involved in the triggering legal action. Similar risks exist across other privacy protocols and yield-farming contracts that rely on stablecoin bridges or wrappers.

Why It Matters

For Traders

Users with exposure to privacy-protocol stablecoin wrappers face sudden liquidity lockouts; traders should audit counterparty risk in any wrapped-token position.

For Investors

The incident underscores concentration risk in DeFi: stablecoin issuers retain unilateral freeze power over all downstream contracts, creating systemic vulnerability regardless of protocol quality.

For Builders

Teams designing privacy or yield protocols should architect direct stablecoin integrations or multi-issuer strategies to reduce exposure to single-entity blacklist actions.