CFTC Chair Selig floats federal option for offshore exchanges after Binance hack

Three days after an attacker drained roughly $6.3 billion from Binance's hot wallets, the US regulatory response is forming around one lever Congress has not been able to pull: a federal registration option that would let offshore exchanges opt into CFTC oversight. CFTC Chair Michael Selig pitched the idea on CNBC on October 30, hours before President Trump said he was "looking into" the hack and Senator Cynthia Lummis (R-Wyo.) argued the stalled CLARITY Act would already have given US firms a cleaner path to freeze suspicious flows.

What happened

Selig told CNBC that the Binance theft "proves our exact point" about the crypto-market rules his agency proposed on October 5, 2026. His framing was pointed: the exploit did not break Ethereum or its smart contracts — the vulnerability was "introduced from someone's laptop" — but "these are unregulated offshore exchanges, and they don't have the same sorts of safeguards" as US-registered venues. Binance has since reported "additional points of breach," so Selig's account of the mechanism is preliminary.

Separately, at a Friday afternoon press conference reported by The Block, Trump said he was watching the hack, that Binance had assured customers they would be made whole, and that he had "long felt that this kind of system was a little bit dangerous." No specific regulatory action was announced.

Cody Carbone, CEO of The Digital Chamber, wrote to House and Senate leadership the same day urging Congress to give the CFTC authority over crypto exchanges and separate customer and company funds in bankruptcy. His line to the leadership: "Regulators can only act after the damage is done. We urge you to act before this Congress adjourns."

The CFTC proposal — what a federal option looks like

Selig's team is drafting a framework the agency can advance without waiting for Congress:

• A federal registration path for leveraged and margined retail crypto trading, inside the CFTC's existing authority over derivatives.
• An opt-in route for offshore venues that choose to meet US-grade cybersecurity standards, with the carrot of lawful US customer access on the other side.
• A separate rulemaking that would classify event contracts as swaps, aimed at prediction markets.
• Selig cited on-chain tracing as giving regulators "a lot of potential to be really cop on the beat here" — a departure from the Gensler-era CFTC/SEC posture that frequently treated the public ledger as an obstacle rather than an evidence source.

None of this is new authority. It is the CFTC saying it will use what it has while the Senate stalls on CLARITY.

CLARITY Act — stalled, and contested on what it would have done

The CLARITY Act passed the House in 2025. In the Senate it has stalled, with Democratic negotiators citing concerns about Trump's crypto exposure through World Liberty Financial and the TRUMP memecoin.

Lummis, a negotiator on the bill, argued on X that CLARITY would have given firms legal cover to freeze suspicious transactions faster. That claim is disputed in the record itself:

• Amanda Fischer of Better Markets reads the bill as requiring stablecoin issuers to freeze assets only on a court order.
• Patrick Wilson of the Solana Policy Institute reads it as protecting voluntary, temporary holds without a court order.

Both readings bear on the actual sequence of events on October 29–30, when Tether froze $1.567 billion USDT and Circle blocked more than $800 million USDC linked to the hack — moves that happened without a court order and whose legal basis is now one of the live questions in the recovery process.

The attack vector regulators cannot patch

The breach itself does not fit a regulatory gap. Per Binance co-CEO Richard Teng, the compromise started with a DevOps engineer's laptop, which gave the attacker a path into a service container used by Binance's signing infrastructure. From there, the attacker exploited EIP-7702 account-abstraction delegations to turn Binance's own hot wallets into sweepers. TRM Labs attributed the operation to TraderTraitor, a North Korean unit.

Federal registration of the exchange would not have stopped the laptop compromise. What it would change — and what Selig's pitch leans on — is the minimum security baseline and the reporting pipeline when something does break: SOC 2 controls on signing infrastructure, incident disclosure timelines, mandated customer-fund segregation, and a direct examination channel into the exchange.

Context — the pattern

Every record exchange collapse of the last three years has triggered a US regulatory offer that trades access for oversight: FTX in late 2022 (Terraform/Celsius wake); the March 2023 BUSD action against Binance; the June 2023 SEC complaints; and now this. The pattern is consistent: a loss event concentrates political will the industry's lobbyists could not previously overcome, and the agency with jurisdiction over the symptom claims the ground before Congress acts.

What is different this time is the explicit offshore-first framing. Selig is not asking Congress to expand CFTC authority. He is offering an opt-in federal option to the venues that have been operating around it. Whether offshore exchanges actually take him up on the offer is a separate question, and one the market will answer with its feet long before the CFTC publishes a final rule.