Lummis Says CLARITY Act Would Have Enabled Faster Response to $6.3B Binance Hack

Lummis Ties CLARITY Act to Binance Hack Response

Senator Cynthia Lummis, one of Congress's most vocal crypto allies, argues that the stalled CLARITY Act would have produced a faster official response to the Binance hack that drained roughly $6.3 billion from the exchange. In a post on X, she described the theft as the largest cyber heist in history, noting that more than $6 billion left the platform in under four hours and that every minute of delay lowers the odds of recovering the funds. Her case rests on the bill's own architecture: the legislation would classify a platform like Binance as a regulated digital asset service provider and would keep existing financial and sanctions laws fully in force against such firms, giving law enforcement a defined counterparty the moment suspicious movement appears rather than a jurisdictional patchwork to work through. She also argued the framework would have let authorities move within minutes of first contact, not days.

The bill is in limbo. It cleared the House but failed a Senate procedural vote on September 15 by 49 in favor to 50 against, and no new schedule has been set. Lummis's intervention puts that defeat back at the center of the debate: in her framing, the gap between House passage and Senate rejection is now measured in stolen customer funds. Her office has not said when she intends to force another vote.

The CLARITY Act is the Senate's main market structure bill. It would divide oversight of digital assets between the U.S. Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) along asset-class lines, and it contains the digital asset service provider category that Lummis cites as the legal hook a rapid response against Binance would have needed. Whether that category would in practice have authorized an immediate freeze is exactly the question her colleagues and outside lawyers now contest.

Counterclaims, a $3B Freeze and a CFTC Option

The claim drew immediate pushback grounded in the bill's own language. Amanda Fisher, policy director and chief operating officer at the nonprofit Better Markets and a former chief of staff at the SEC, replied that the CLARITY Act obliges stablecoin issuers to freeze funds only under a court order, calling Lummis's account inaccurate; she pointed to the bill's exchange-focused provision and noted that crypto firms were already freezing assets as quickly as possible. Patrick Wilson, legal counsel at the Solana Policy Institute, answered in turn: the same clause, he wrote, expressly protects stablecoin issuers from private lawsuits when they voluntarily impose a temporary freeze on a reasonable belief that illegal conduct has occurred, so no court order is required. Each side cites a different provision of the same text.

Away from the dispute, the recovery effort has produced hard numbers. Stablecoin issuers and blockchain companies froze nearly $3 billion of the stolen funds within hours of the attack, and Binance has pledged to return all user funds. Blockchain intelligence firms TRM Labs and Chainalysis have concluded with high confidence that a North Korean state-backed hacking unit carried out the theft.

The industry is also pressing Congress directly. The Digital Chamber, representing more than 250 member companies, wrote to congressional leadership after the hack, asking it to take up a bill focused on customer asset protection and federal oversight of US exchanges before the session ends. Its three minimum conditions: segregate customer assets from company property so clients rank first in any bankruptcy, give the CFTC registration, inspection and enforcement authority over US digital commodity exchanges, brokers and dealers, and require multi-person approval before customer assets move. A narrowed version of the Digital Commodity Intermediaries Act, which passed the Senate Agriculture Committee and holds the core exchange registration and customer protection framework, would let regulators supervise US exchanges immediately while broader talks continue, the group argues. US spot venues such as Coinbase operate under state-by-state money transmitter licenses today, with no comprehensive federal registration regime covering them.

The regulator side is moving too. CFTC Chair Michael Selig said on CNBC on October 30 that Binance is an unregulated offshore exchange lacking the cybersecurity protections required of US financial markets, and repeated his proposal for a voluntary registration option applying US derivatives-market standards and customer protection rules to participating exchanges. He added that blockchain records are public, making stolen funds easier to trace than cash from a bank robbery, and said the CFTC will assist law enforcement.

The dispute is at bottom a fight over statutory language, and both camps quote the same bill text to opposite conclusions, so the reference point has to be the legislative text itself rather than any summary of it. Politically, the hack has made the market structure debate concrete: the comprehensive bill already failed a Senate procedural vote 49-50, while the narrower route through the Digital Commodity Intermediaries Act gives leadership a smaller package it could pass before the session ends. Banks such as JPMorgan Chase already operate under unified federal supervision, and both Selig's voluntary registration option and the Digital Chamber's letter anticipate the equivalent for digital commodity exchanges. Readers weighing platform risk in the meantime can compare venues through our guide to the Best Crypto Exchanges.