Circle executed a court-ordered blacklist action against the Ethereum address of Zama's cUSDC contract on Saturday morning, freezing approximately $12.6 million in USDC. The freeze stemmed from a temporary restraining order connected to a civil suit involving Overnight Finance, a DeFi yield protocol. Zama, a privacy infrastructure company with no direct role in the dispute, received no advance notice. Its depositors, many of them entirely unconnected to Overnight Finance, found their funds inaccessible.

On-chain investigator ZachXBT surfaced the freeze roughly seven hours after it occurred, posting to his Telegram channel "Investigation by ZachXBT" that Circle had added the cUSDC contract to its blacklist. Blockchain data shows that a wallet linked to Overnight Finance deposited approximately $12.4 million USDC into the cUSDC contract on May 11, 2026. That deposit appears connected to the proceedings that produced the TRO. Because Zama's contract pools all depositor funds in a single shared address, the freeze touched the entire balance, not just the Overnight Finance portion.

Zama CEO Rand Hindi described the situation plainly. "Caught in a crossfire," he told The Block, confirming his team was investigating. The framing is accurate: the cUSDC contract is a privacy wrapper that converts standard USDC into a confidential form using fully homomorphic encryption, a cryptographic method that allows computations on data without first decrypting it. Zama builds this capability into its fhEVM product, a programmable encrypted execution environment designed to bring confidential smart contracts to Ethereum. Because the privacy model requires a shared pool from which individual balances cannot be individually distinguished or isolated, the pooled architecture is a technical necessity rather than an avoidable design choice. Users deposit USDC into that shared pool and receive cUSDC tokens that enable private transfers. That architecture is precisely what made a single court order capable of locking every depositor's balance simultaneously.

Circle's position on freeze authority has been consistent. CEO Jeremy Allaire stated in a prior public statement in April 2026 that the company acts only under legal compulsion: "Circle follows the rule of law, and we are able to undertake actions such as freezing a wallet at the direction of law enforcement or the courts." Circle did not exercise discretion here. It complied with a court order, and the collateral damage was a function of how the target contract was architected, not a policy failure at Circle. That distinction matters for developers, but it offers little comfort to depositors waiting for resolution. The freeze also adds to a complicated picture for Circle in 2026. ZachXBT earlier accused the company of allowing more than $420 million in illicit funds to move unimpeded across various cases, while simultaneously freezing 16 legitimate business wallets in an unrelated incident.

The Overnight Finance side of the case involves a governance dispute that escalated into litigation. A community Snapshot proposal described the problem as co-mingling of personal and protocol wallets, estimating roughly $15 million in OVN (Overnight Finance's governance token) holder funds were affected. That dispute, originating entirely within Overnight Finance's own governance structure, ultimately produced the court order that reached into a separate protocol's contract and locked third-party depositors.

For users outside the United States, the implications extend well beyond this specific case. Sub-Saharan Africa processed more than $205 billion in on-chain transaction volume in the twelve months to June 2025, with stablecoins accounting for approximately 43 percent of that total. Nigeria alone recorded roughly $22 billion in stablecoin transactions over the same period. Across Nigeria, Kenya, Ghana, Pakistan, and India, USDC functions as operational infrastructure for remittances, FX hedging, and small business treasury management, not as a speculative position. The Zama freeze demonstrates that a US civil court order can reach into a pooled smart contract and lock balances belonging to users who have no connection to the underlying dispute and with limited visibility into legal remedies available to them in a foreign jurisdiction. Regulators in South Africa, Kenya, and Nigeria, all of which are actively building crypto licensing frameworks, now have a concrete case study for evaluating how foreign court orders interact with on-chain assets. South Africa's Financial Sector Conduct Authority had approved more than 300 crypto asset service provider licenses by the end of 2025, and Kenya passed a Virtual Asset Service Provider bill in 2025, making both countries immediate stakeholders in how this kind of cross-border legal exposure is ultimately resolved.

For developers building DeFi products on USDC, particularly yield aggregators, lending pools, and privacy layers in South Asia and Africa, the takeaway is structural. Wrapping a centralized stablecoin inside a pooled smart contract creates a single point of legal failure. If any one depositor's funds become subject to legal proceedings, the entire contract is vulnerable to a freeze action. That risk is not theoretical. It happened on Saturday morning, and a protocol that had nothing to do with the lawsuit is now working to resolve the situation for its users. How quickly and fully those funds are released will likely depend on the progress of the underlying civil case, and no resolution timeline has been disclosed.