Circle has blacklisted the smart-contract address for Zama's confidential USDC (cUSDC) token, freezing roughly $12.6 million in user funds. The move targets a privacy-focused DeFi protocol that is not under any known litigation. The frozen tokens are held within a protocol built around privacy, but the reason for Circle's action hasn't been publicly explained.
Why Circle blocked the address
Circle's blacklist essentially locks the smart-contract address associated with Zama's cUSDC. That means any USDC deposited into that contract is now inaccessible — at least until Circle reverses the decision. The company hasn't said why it singled out this particular address. Blacklists are usually applied in response to regulatory concerns, sanctions links, or suspicious activity, but in this case the protocol itself is not facing any legal action.
The frozen funds and the protocol
The $12.6 million sits inside a DeFi protocol that focuses on privacy. Users had deposited USDC into cUSDC, a wrapper token meant to keep transaction details confidential. The fact that the protocol isn't under litigation suggests Circle's action may have been aimed at the token's design or its role in a broader compliance sweep. Either way, the users whose funds are caught in the freeze have no way to withdraw them for now.
How cUSDC works
Zama's cUSDC is an ERC-1967 proxy contract. That's a type of smart contract that allows the underlying logic to be upgraded without changing the token's address. The contract pools USDC from multiple users, then issues cUSDC tokens in return. The proxy structure is common in DeFi because it lets developers fix bugs or add features without forcing everyone to migrate to a new address. It also means the contract's code can be swapped — but Circle's blacklist overrides that flexibility.
What happens next
For now, the frozen tokens remain locked. Neither Circle nor Zama has announced a timeline for resolution. The affected users are left waiting, and the wider DeFi community is watching closely — because a blacklist on a major stablecoin issuer like Circle sets a precedent for how privacy-focused tokens might be treated in the future.
