Newsletter

• Chairman Michael Selleger, in an interview with CNBC, stated that the $6.4 billion Binance hack "precisely demonstrates" the necessity of the encryption market regulations proposed by the institution this month.
• Selig described this attack as a vulnerability introduced by a laptop, rather than a blockchain flaw; however, Binance later stated that they had discovered "more entry points."
• CFTC The chairman also described on-chain traceability as a regulatory advantage.

Michael Selliger, chairman of the Commodity Futures Trading Commission (CFTC) of the United States, stated that the record-breaking hack at Binance illustrates why offshore crypto exchanges need to be subject to U.S. regulation. He used this theft case, which amounted to approximately $6.4 billion, as a basis to push for the establishment of a federal regulatory framework by the agency.

In an interview with CNBC on Friday, Selig said that this security vulnerability "precisely demonstrates" the logic behind the regulatory rules for the crypto market proposed by the institution earlier this month.

He said, "The real problem is that these are unregulated offshore exchanges that do not have the same safeguards as the U.S. financial markets." He also advocated for the establishment of a "federal option" that would allow such trading venues to register with CFTC and be subject to the same cybersecurity standards as the U.S. market.

Selig attempted to downplay the role of blockchain itself in this attack. He stated that the exploit did not involve breaking into the underlying blockchain—in this case, Ethereum—or its smart contracts, but rather took advantage of a vulnerability that he believed was “introduced by someone’s laptop,” and such incidents can also occur in traditional markets.

He said that the difference in the crypto field lies in speed: funds are transferred much faster, and attackers can also use tools such as Tornado Cash to transfer funds in order to cover their tracks.

However, Selig's description may not be complete. Binance initially attributed the incident to the compromise of a laptop belonging to an engineer with the username DevOps, but the company stated on Friday that further investigation had revealed "more entry points." CEO Richard Teng described it as "a more complex attack process" that "did not simply rely on the privileges of just one engineer."

In addition, although this theft did not expose any flaws in Ethereum itself, part of the attack took place on the blockchain: the attackers exploited a feature of Ethereum known as EIP-7702, which allows ordinary wallets to execute smart contract code. With 50 pre-signed authorizations, they turned a Binance hot wallet into a “scraper” (sweeper) and transferred the assets from it.

TRM Labs indicates that the broader security vulnerability refers to the breach of Binance's signature infrastructure, rather than any inherent weakness in the blockchain itself.

Nevertheless, Selig still views the transparency of blockchain as a regulatory advantage. He said, "Even if some of these technologies are used to obscure the trail of transactions, transactions on the chain can still be traced, which gives regulators great potential to truly become the frontline enforcers in this area."

These comments further reinforce the stance that Selig has been promoting over the past few weeks. CFTC has not waited for congressional action but has continued to advance its own efforts in formulating crypto regulations. A proposal has been submitted to the White House, proposing to define event contracts as “swaps” and outlining plans to bring crypto exchanges under federal regulation. This is also part of a broader shift: after the Clarity Act initiative encountered obstacles in the Senate, regulatory agencies have begun to take a more proactive role.

This Binance hack incident provides a clear argument for this effort. This attack is the largest vulnerability exploitation event in the history of the crypto industry. Binance has allocated $6.34 billion to cover the losses and assured users of the safety of their assets. The United States Secret Service and the Federal Bureau of Investigation have launched investigations, while TRM Labs and Chainalysis have linked this theft to North Korea's TraderTraitor organization.