Svmuufounder Rand posted on platform X, stating that with the assistance of on-chain detective ZachXBT, the team has identified the root cause of the recent cUSDC freeze incident, which is unrelated to the Zama protocol itself or privacy technology. The incident originated when a wallet address associated with the Overnight Finance hack deposited over $12.5 million USDC into Zama's cUSDC wrapper contract. Since the address was not on any sanctions list at the time of deposit and was not flagged by KYT (Know Your Transaction) tools, the funds were able to enter the protocol.
Rand stated that law enforcement agencies recently issued asset restriction orders against several wallets linked to the hacker. At that time, the cUSDC wrapper contract held relatively small funds, with over 99% coming from the aforementioned hacker address. Consequently, the court ordered the freezing of the entire wrapper contract to restrict the movement of the related funds. Rand emphasized that this measure is not a sanction against Zama or privacy protocols, but a common judicial freezing measure in the DeFi space.
To cooperate with the investigation, Zama has suspended the operation of the cUSDC, cUSDT, and cWETH contracts until the investigation is complete, all involved addresses are identified, and corresponding measures are taken. Rand reiterated that Zama adheres to the principle of "compliant confidentiality" and will not tolerate any illegal activities. He also indicated that a more detailed post-mortem of the incident and a plan for handling similar requests in the future will be released subsequently.