Circle CTO Chandhok: No Rollback for Stolen Arc
Circle's Chief Product and Technology Officer Nikhil Chandhok was asked in an interview with Bankless whether Circle would roll back if lending protocols like Aave deployed on Arc were attacked by Lazarus, resulting in the theft of tens of millions to hundreds of millions of USDC. He did not commit to any specific action, emphasizing that Arc is an immutable public financial infrastructure with over 20 validators.
He stated that a rollback is an extremely significant decision, and breaking immutability would destroy trust on a level that is difficult to rebuild. Regarding user errors leading to losses of about $10,000 to $100,000 USDC, he also expressed disinterest in rolling back the blockchain for "any reason," stating that Circle does not have special powers to rewrite transaction paths, and users must assess the risks of tokens and smart contracts themselves. The chain itself will not roll back, and freezing USDC addresses at the contract level is a separate matter.
Arc is set to launch its mainnet on September 16, 2026, positioning itself as an EVM-compatible layer one network for stablecoin finance, with transaction fees priced in USDC and sub-second finality. Founding validators include institutions such as BlackRock, DTCC, Visa, Mastercard, ICE, Standard Chartered, SBI Group, Galaxy, MoneyGram, and Sumitomo; validators are permissioned, and contract deployment does not require Circle's keys. The testnet has processed over 700 million transactions. Circle has deployed approximately $649 million USDC and about $7 million EURC on-chain. Aave, Morpho, and Uniswap have appeared on the ecosystem list. The planned total supply of ARC tokens is 10 billion, with public issuance yet to be finalized, and there are plans to shift towards proof of stake.
Chandhok referred to Arc as an economic operating system, serving institutional RWA, non-USD stablecoins, and AI agents, rather than just transferring USDC activities from Ethereum. Privacy is handled through optional trusted execution environment partitions, with validators and Circle claiming they cannot see the contents of private transactions. He emphasized privacy and the agent economy. The initial group of validators consists of about a dozen institutions, with a goal to expand to 20 to 40.
Who is buying and who is selling: Buyers are attracted by the narrative of a settlement layer backed by institutional validators, while sellers are concerned about the implicit insurance that "Circle will change history if something goes wrong." The event was driven by interviews on the day of the mainnet launch, with funds shifting from multi-chain USDC liquidity probing to Arc's native fees and lending deployments. Beneficiaries are institutional validators seeking predictable finality, while those under pressure are protocol users who mistakenly view Circle's issuance rights as superpowers on-chain. The freezing rights remain with the token contract, while the rollback rights have been conceptually shut down.
Public reports did not provide specific contract addresses or emergency multi-signature lists for the hypothetical Lazarus scenario; what can be verified are the original interview quotes, the list of validators, and the mainnet date.
Source: Public Information
ABAB AI Insight
Circle has made money over the past decade by issuing USDC on other chains. Arc consolidates minting rights, gas pricing, and the validator roster into a single balance sheet. Chandhok, coming from Meta, Google, YouTube, and Microsoft product lines, speaks of an operating system rather than yet another public chain. Listing BlackRock and Visa as validators integrates traditional financial compliance concerns into block production rights.
The capital path is: USDC circulation supports the valuation of publicly listed companies, then shifts settlement from renting Ethereum block space to owning its own layer. The pre-mined total of 10 billion ARC tokens and an estimated $2.2 billion pre-sale valuation leave room for future governance and security budgets. The statement against rollback aims to prevent Arc from being perceived as "Circle's private ledger"; retaining freezing rights is still required by regulators for issuers to act on sanctioned addresses. These two powers must be separated; otherwise, institutional validators cannot explain to auditors.
The benchmark is Ethereum's hard fork after The DAO, and the subsequent verbal commitment of many new chains to "never rollback." Circle chooses to align with the orthodox narrative post-fork while using permissioned validators to avoid a truly leaderless network. Tether is building its own stablecoin chain, and Stripe is also laying down a settlement layer, as stablecoin issuers enter the infrastructure race. The industry phase is shifting from multi-chain deployment to vertical integration by issuers.
Structural judgments belong to the overlay of regulatory changes and the transfer of pricing power. The mechanism is: stablecoins need to enter banks and payment networks, and validators must be identifiable; once identifiable, users will question who can alter the ledger. Chandhok uses immutability to block ledger alterations and token freezing to satisfy law enforcement. Trust is divided into two layers—ledger history is read-only for everyone, while dollar liabilities can still be frozen by identifiable issuers. The Lazarus issue is intentionally left at the principle level because once a rollback commitment is made, Arc transforms from a public infrastructure back into a corporate database.
ABAB News · Cognitive Laws
- The ability to freeze addresses does not equate to the ability to alter history.
- Validators must be identifiable, but the ledger must remain read-only.
- Issuers building their own chains first sell the illusion of market rescue.