Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair Says

Speaking to CNBC on Friday, Selig said the breach "proves our exact point" behind the crypto-market regulations the agency proposed earlier this month. "The real issue here is that these are unregulated offshore exchanges, and they don't have the same sorts of safeguards that we have in our financial markets here in the United States," he argued, pitching a "federal option" that would let such venues register with the CFTC and submit to the same cybersecurity standards that govern US markets.

Attack Details

Selig sought to downplay the role of blockchain in the attack, stating the exploit didn't break Ethereum or its smart contracts but rather exploited a vulnerability he believed was "introduced from someone's laptop." The difference with crypto, he said, is speed: funds can move far faster, and attackers can route them through tools like Tornado Cash to obscure their trail.

Binance's Response

Selig's characterization may be incomplete. Binance initially pointed to a compromised DevOps engineer's laptop but later revealed its investigation had uncovered "additional points of breach." CEO Richard Teng called it "a more complex attack process" that "did not simply use one engineer's permissions." The attack used Ethereum's EIP-7702 feature to turn a Binance hot wallet into a "sweeper" using 50 pre-signed authorizations, draining its assets.

Regulatory Advantage

Despite the attack's complexity, Selig framed blockchain's transparency as a regulatory advantage. "The fact that we can trace transactions on-chain, even when some of these technologies are used to obfuscate that, gives regulators a lot of potential to be really cop on the beat here," he said. The CFTC has pressed ahead with its own crypto rulemaking rather than wait on Congress, with the Binance hack providing a vivid talking point for their efforts.