Circle says it complied with a warrant to freeze stolen USDC but cannot invalidate or reissue tokens held in third-party wallets.