CFTC’s Michael Selig Uses Binance’s $6.3 Billion Theft to Push Federal Oversight of Offshore Crypto Exchanges

Commodity Futures Trading Commission Chairman Michael Selig is using the Binance theft of more than $6.3 billion to argue for federal supervision of offshore cryptocurrency exchanges. For PSPs and other high-risk payment players, the point is simple: the control failure sits with the intermediary, not the blockchain.

1. On CNBC on Friday (Oct. 30), Selig said the breach “proves our exact point” about the crypto market framework his agency outlined in October. He used the incident to promote a federal registration option that would require offshore platforms to follow cybersecurity standards comparable to those governing U.S. financial markets.
2. “The real issue here is that these are unregulated offshore exchanges, and they don’t have the same sorts of safeguards that we have in our financial markets here in the United States,” Selig said. In other words, the asset chain can be intact while the exchange’s operational controls are not.
3. The comments come as Congress failed to pass the Clarity Act, which would have set a framework for much of the U.S. cryptocurrency market, according to Decrypt. With that route stalled, the CFTC is trying to use existing authority to bring exchanges into a federal supervisory structure.
4. Selig said the Binance incident shows the difference between blockchain security and the security of an intermediary holding customers’ assets. He said the attacker exploited a vulnerability he believed originated on an employee’s laptop, without breaking Ethereum or its smart contracts.
5. That explanation is still provisional. Binance initially identified a compromised DevOps engineer’s laptop, then later disclosed additional breach points. Chief Executive Richard Teng described a more complex attack involving more than one engineer’s permissions, while TRM Labs said the evidence points to compromised Binance signing infrastructure rather than a blockchain weakness.

The mechanics matter for anyone deciding whether to touch offshore crypto flows: the attacker used an Ethereum feature that allowed ordinary wallets to execute smart-contract code, turning a Binance wallet into a drain on assets using 50 pre-signed authorizations. Selig’s regulatory argument is that a functioning blockchain does not protect customers if an exchange’s authorization systems are compromised.