The roughly $6.4 billion breach suffered by Binance has provided fresh ammunition for the US derivatives market regulator. Michael Selig, who heads the Commodity Futures Trading Commission (CFTC), emphasized that the case of the world’s largest exchange demonstrates the importance of bringing offshore platforms under US regulatory oversight. Speaking to CNBC, Selig said the largest hack in crypto history validates the market regulation proposal package his agency submitted earlier this month.
For the commission chair, the root of the breach lies not in the resilience of blockchain technology, but in uneven security standards.
Not a Flaw in the Blockchain Protocol
Selig clarified that the breach did not stem from flaws in Ethereum’s underlying protocol code or its smart contracts. Instead, the attack penetrated through a security vulnerability on an operational laptop - the type of incident commonly seen in traditional financial markets. According to Selig, the primary issue with offshore exchanges is the lack of strict oversight and cybersecurity protections typically enforced at US financial institutions.
The velocity of funds moving across crypto networks and the use of privacy tools like Tornado Cash are key differentiating factors that make prevention significantly harder compared to traditional banking transactions.
Why Offer a Federal Option
Addressing that jurisdictional gap, Selig proposed a federal pathway, or federal option. Through this mechanism, offshore exchanges could voluntarily register with the CFTC and adopt cybersecurity standards on par with US financial markets.
Selig’s remarks underscore the CFTC’s determination to act independently. Without waiting for action from the US Congress amid the stalled passage of the Clarity Act bill in the Senate, the commission continues to push its own regulatory proposals directly to the White House.
Breach Points Beyond the Laptop
On the other hand, Binance’s internal findings point to a more multi-layered intrusion pattern. Binance CEO Richard Teng revealed that the company’s investigation uncovered additional breach points beyond the DevOps engineer’s laptop, indicating a far more complex hacking operation.
Analytics firm TRM Labs noted that the hack breached Binance’s signing infrastructure by exploiting EIP-7702 authorizations to drain assets from the exchange’s hot wallets.
The scale of the hack triggered a response from law enforcement. The FBI, alongside the Secret Service, has opened a formal investigation into the Binance hack, tracing potential links to the North Korean hacking group TraderTraitor.
Regarding customer protection, Binance stated it has set aside $6.34 billion in corporate funds to reimburse all affected user assets. For asset holders, that compensation provides balance certainty, but the CFTC’s maneuver signals a new chapter in the jurisdictional tug-of-war over crypto exchanges outside US territory.
Sourced from Decrypt.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
