CFTC Chair Cites Binance Hack in Push for US Oversight of Offshore Exchanges

Selig's account of the attack

According to Selig, the exploit did not break the underlying Ethereum blockchain or its smart contracts. He placed the weakness in a vulnerability introduced through someone's laptop, a type of incident he said also happens in traditional markets. He drew the distinction on speed, noting that crypto funds can move far more quickly and that attackers can route them through tools such as Tornado Cash to hide their trail.

Binance revises its explanation

Binance first named a compromised DevOps engineer's laptop as the source. On Friday it said its investigation had since uncovered additional points of breach. CEO Richard Teng described a more complex attack sequence that did not rely solely on one engineer's permissions. TRM Labs, for its part, said the wider breach points to compromise of Binance's signing infrastructure instead of any weakness in a blockchain.

Binance is a cryptocurrency exchange and finance company based in the United Arab Emirates. It has set aside $6.34 billion to cover losses and has told users their assets are safe.

CFTC pursues federal rules

The CFTC has advanced its own crypto rulemaking rather than wait for Congress. It has sent the White House proposals that would classify event contracts as swaps and has floated a plan to bring crypto exchanges under federal oversight. The push follows the stalling of the Clarity Act in the Senate, which has left regulators to lead. Selig has been making this argument for weeks, and the Binance hack gives it a concrete example.

Open questions

• Which additional points of breach did Binance identify in its investigation?
• Will the CFTC's proposals on event contracts and exchange oversight be adopted?