The record-breaking $6.4 billion hack of Binance demonstrates why offshore crypto exchanges require U.S. oversight, according to CFTC Chairman Michael Selig. Speaking to CNBC, Selig said the breach "proves our exact point" behind crypto-market regulations the agency proposed earlier this month.
Selig characterized the vulnerability as originating from a compromised laptop rather than a flaw in the underlying blockchain. However, Binance later revealed the attack was more complex than initially believed. CEO Richard Teng said the investigation uncovered "additional points of breach," describing it as "a more complex attack process" that involved multiple access vectors.
The CFTC chair argued that offshore exchanges lack the cybersecurity safeguards required of U.S. financial institutions. He pitched a "federal option" that would allow such venues to register with the CFTC and submit to equivalent security standards.
According to analysis by TRM Labs, the breach points to a compromise of Binance's signing infrastructure rather than a weakness in the blockchain itself. The attacker used an Ethereum feature to turn a Binance hot wallet into a sweeper account, draining its assets through 50 pre-signed authorizations.
Selig highlighted blockchain transparency as a regulatory advantage. "The fact that we can trace transactions on-chain, even when some of these technologies are used to obfuscate that, gives regulators a lot of potential to be really cop on the beat here," he said.
Binance set aside $6.34 billion to cover losses and assured users their assets remain safe. The Secret Service and FBI have opened investigations into the theft. TRM Labs and Chainalysis have linked the hack to North Korea's TraderTraitor group.
