Circle froze Zama's cUSDC contract, locking $13M USDC, after allegations linked it to a rug pull. The event exposes compliance limits in privacy tokens.