CFTC Chair Selig Proposes Voluntary Exchange Registration After $6.3B Binance Hack

A Federal Option for Offshore Exchanges

The estimated $6.3 billion stolen from Binance in Thursday's breach has turned into a fight in Washington over who should police large crypto exchanges, and how. Commodity Futures Trading Commission (CFTC) Chairman Michael Selig said in a televised interview on Friday, October 30 that he wants a federal option offshore venues could join voluntarily, two days after the October 29 intrusion. “We want to give these exchanges a federal option, to come and register with the CFTC,” Selig said. Under his proposal, qualifying platforms would enter federal oversight covering cybersecurity standards, market manipulation controls, customer protection and custody guarantees. The plan's structural weakness is enforcement: without new authority from Congress, the agency cannot compel a single offshore exchange to sign up. The offer builds on an initiative the CFTC published on October 5; the agency's press release describing the advance notice lays out tailored rules under consideration for certain leveraged, margined and funded retail crypto trading, with a public comment period that runs to December 14. Selig framed the onshore-offshore gap directly: unregulated offshore exchanges, he argued, do not run the safeguards that are standard in United States financial markets. He also narrowed the technical blame. Most cyber losses in the sector, he said, hit peripheral systems rather than blockchains themselves, and the Binance incident may have involved a vulnerability traced to a laptop. Stolen coins move fast and can be obscured through mixers, services that pool and shuffle funds to hide their origin, though he said on-chain transaction records still let investigators follow the money. The practical response has already started. Binance and its partners have frozen about $3 billion in assets, close to half of the estimated loss, and the exchange has committed to restoring affected customer balances.

Lummis Faults the Stalled CLARITY Act

Senator Cynthia Lummis, a Wyoming Republican, argues Congress already had its chance to equip responders and let it lapse. The CLARITY Act, in her reading, would have given companies legal protection for freezing suspicious transactions at law enforcement's request, exactly the kind of tool that matters in the hours after a theft of this size. The bill failed a procedural vote in the Senate on September 15, falling short of the 60 votes needed to advance, and it has not been rescheduled since. It remains proposed legislation rather than a final rule; until it clears another vote, no provision in it has legal force. “Every minute wasted is a loss that can never be recovered,” Lummis wrote in a post on X on October 30. That framing drew a rebuke from Amanda Fischer of the advocacy group Better Markets, who argued that existing mechanisms already permit voluntary freezes and that the proposal would not change those practices. Lummis answered on the same platform, pointing to the bill's provisions for regulated digital asset service providers, which she said would have granted them additional authority while lowering their legal exposure. “No law can stop every bad actor, but the CLARITY Act would have given those fighting them better tools and faster action. Your party voted no and must answer for it,” she wrote, addressing Fischer by name. The split between the two camps is legal, not technical. Fischer treats current freeze powers as sufficient; Lummis wants statutory cover so service providers can move faster without carrying the liability risk a premature freeze creates. What the bill would not have changed, on either reading, is the intrusion itself: neither text before Congress touched the operational security of exchange infrastructure, the surface Selig said the attackers most likely exploited.

Frozen Funds Cover Half the Loss

Neither track on offer this week changes the position of the stolen funds. Selig's framework is a proposal inside a comment window that closes December 14; it binds no exchange today, and by his own account it cannot be made compulsory without Congress. The legislative route needs the same 60 Senate votes it already lacked in September. What has moved is unilateral: the roughly $3 billion Binance has frozen with partners covers under half of the estimated $6.3 billion taken, and the pledge to make customers whole depends on recovered assets or the exchange absorbing the loss itself. Domestically registered venues such as Coinbase Global already operate inside United States oversight, the position Selig wants offshore platforms to be able to choose. His own remarks raise the harder question: whether registration would have altered an operational failure, a laptop-level vulnerability, that no registration checklist guarantees against.