CFTC offshore oversight push gains a case study from the Binance hack

Washington's top derivatives regulator wasted no time turning the record crypto theft into an argument. The case for CFTC offshore oversight, Chairman Michael Selig said on CNBC on Friday, is exactly what the Binance hack illustrates: large venues operating outside U.S. rules without the safeguards domestic markets must carry.

What happened

Selig said the breach "proves our exact point" about the crypto-market proposals the agency floated earlier this month. His pitch is a "federal option": exchanges could register with the commission and, in return, accept the same cybersecurity standards that apply to U.S. trading venues today.

He framed the attack as a failure around the blockchain, not of it. In his telling, a vulnerability entered through someone's laptop, the kind of intrusion traditional finance also suffers, while crypto differs mainly in how fast money can move and how mixers such as Tornado Cash can blur the trail. Even so, he argued that public ledgers give investigators "a very good shot" at tracing funds, better than after a bank robbery, and said the CFTC will help law enforcement.

Decrypt noted the laptop framing may be incomplete. Binance itself said on Friday it had found additional points of breach, and TRM Labs described a compromise of the exchange's hot-wallet signing setup, including an EIP-7702 delegation used to sweep an Ethereum wallet.

Why it matters

The comments land in a crowded policy moment. The Clarity Act has stalled in the Senate, so the commission has been pressing ahead with its own rulemaking, including proposals sent to the White House that would treat event contracts as swaps. A vivid, multibillion-dollar failure at an offshore giant gives that agenda a ready example, much as the CFTC market surveillance push earlier this month leaned on suspicious trading.

There is history, too. The National pointed out that the CFTC sued Binance and its founder Changpeng Zhao in 2023 over trading and derivatives rules. A voluntary path back under U.S. supervision would be a very different relationship. Our coverage of the original Binance security incident has the attack timeline.

Selig's case rests on a practical point: U.S.-registered venues already face cybersecurity examinations, while offshore platforms set their own standards. If a voluntary federal path offered market access in exchange for those checks, CFTC offshore oversight would become a commercial bargain rather than an enforcement threat. The National noted that the Binance theft exceeded the $1.5 billion taken from Bybit in February 2025, giving supporters of a federal rulebook a far larger example than any they had before, and the CFTC chief said he had already heard rumors about where the funds went.

What's next

Watch for any formal CFTC proposal text on exchange registration and for whether large offshore platforms signal interest. Selig's own words are summarized in this Stocktwits report on his CNBC interview.

A voluntary regime only works if the big venues opt in. The test of CFTC offshore oversight will be whether a registration badge becomes a competitive advantage after this week, or stays a talking point.

Whatever the vehicle, the policy question has moved from whether offshore venues need guardrails to who writes them and how fast.