Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair Says

The record-breaking hack of Binance is exactly why offshore crypto exchanges need U.S. oversight, CFTC Chairman Michael Selig argued, using the roughly $6.4 billion theft to press the agency’s case for a federal rulebook.

Speaking to CNBC on Friday, Selig said the breach “proves our exact point” behind the crypto-market regulations the agency proposed earlier this month.

“The real issue here is that these are unregulated offshore exchanges, and they don’t have the same sorts of safeguards that we have in our financial markets here in the United States,” he said, pitching a “federal option” that would let such venues register with the CFTC and submit to the same cybersecurity standards that govern U.S. markets.

Selig sought to downplay the role of blockchain itself in the attack. The exploit, he said, didn’t break the underlying blockchain, in this case Ethereum, or its smart contracts, but exploited a vulnerability he believed was “introduced from someone’s laptop,” the kind of incident that happens in traditional markets too.

The difference with crypto, he said, is speed: funds can move far faster, and attackers can route them through tools like Tornado Cash to obscure their trail.

Selig’s characterization, though, may be incomplete. Binance initially pointed to a compromised DevOps engineer’s laptop, but said Friday that its investigation had since uncovered “additional points of breach,” with CEO Richard Teng calling it “a more complex attack process” that “did not simply use one engineer’s permissions.”

BitcoinBTC · USD

$77,554−4.12%

24H7D1M1YYTD

Oct 25Oct 26Oct 28Oct 30Oct 31

$81.8k$80.1k$78.4k$76.7k

24h HighHigh$77,657

24h LowLow$76,854

VolVol$493.5M

→

$50$100$500

Buy

And while the theft did not expose a flaw in Ethereum itself, the attack did play out partly on-chain: The attacker used EIP-7702, an Ethereum feature that lets ordinary wallets run smart-contract code, to turn a Binance hot wallet into a “sweeper” using 50 pre-signed authorizations, draining its assets.

TRM Labs said the broader breach points to a compromise of Binance’s signing infrastructure rather than a weakness in any blockchain.

Selig framed the blockchain’s transparency as a regulatory advantage regardless. “The fact that we can trace transactions on-chain, even when some of these technologies are used to obfuscate that, gives regulators a lot of potential to be really cop on the beat here,” he said.

The comments sharpen a pitch Selig has been making for weeks. The CFTC has pressed ahead with its own crypto rulemaking rather than wait on Congress, sending the White House proposals that would define event contracts as “swaps” and floating a plan to bring crypto exchanges under federal oversight, part of a broader shift in which regulators have taken the lead after the Clarity Act stalled in the Senate.

The Binance hack hands that effort a vivid talking point.The exploit is the largest in crypto history, with Binance setting aside $6.34 billion to cover losses and assuring users their assets are safe. The Secret Service and FBI have opened a probe, and TRM Labs and Chainalysis have tied the theft to North Korea’s TraderTraitor group.