CFTC Proposes Voluntary Federal Registration for Crypto Exchanges

Chairman Selig links $6.4 billion Binance hack to oversight proposal

CFTC Chairman Michael Selig linked the $6.4 billion Binance hack to his exchange-oversight proposal on Friday, October 30, 2026. Bitcoin Sistemi published a statement from the chairman following the incident.

Chairman Selig told CNBC that the $6.4 billion Binance hack "proves our exact point in proposing regulations for crypto markets earlier this month". He remarked that the theft highlights the necessity for offshore exchanges to register with the agency and implement U.S.-grade cybersecurity standards.

Crypto Briefing reported that Chairman Selig cited the $6.3 billion hack as a reason to push for the registration of offshore exchanges. Forkast News noted that the registration remains optional rather than mandatory.

Binance investigation reveals complex breach points

Binance suffered a hot-wallet breach resulting in a loss of approximately $6.3 billion. The company initially attributed the breach to a compromised DevOps engineer’s laptop.

CEO Richard Teng mentioned subsequently that the probe revealed further points of compromise, characterizing the event as a sophisticated attack process independent of any individual engineer’s permissions. According to TRM Labs, the breach originated from a compromise of Binance’s signing infrastructure, as opposed to a flaw within any blockchain.

By utilizing Ethereum’s EIP-7702 feature, the attacker converted a Binance hot wallet into a sweeper, employing 50 pre-signed authorizations to extract assets. Although an official first described the attack as a vulnerability introduced via a laptop, Binance subsequently pinpointed these further breach points.

Stablecoin issuers freeze $2.67 billion in stolen assets

As of 00:30 UTC on Oct. As of 00:30 UTC on Oct. The U.S. Secret Service and FBI opened a probe into the theft.

North Korea’s TraderTraitor group was identified by TRM Labs and Chainalysis as the party responsible for the theft. Binance allocated $6.34 billion to address losses and provided assurances to users regarding the safety of their assets.

Proposed framework mandates U.S.-grade cybersecurity standards

The proposed framework offers crypto exchanges a voluntary federal registration option. This would subject participating exchanges to the same cybersecurity safeguards currently used in U.S. financial markets.

Chairman Selig proposed this federal alternative, allowing offshore crypto venues to register with the CFTC and comply with those cybersecurity standards. Selig noted that the framework is based on President Trump’s mandate to leverage the CFTC’s current statutory authorities for proposing a federal regulatory market structure for crypto assets.

Regulatory timeline and legislative context for crypto oversight

The CFTC published an advanced notice in the Federal Register on October 13 seeking public comment on a voluntary federal registration framework for crypto exchanges. Public comments regarding this proposal are due within 60 days of the October 13 publication.

Legislative efforts for broader oversight stalled when the CLARITY Act failed to pass the Senate on September 15 following a 49-50 cloture vote. Chairman Selig noted the CFTC lacks the authority to mandate that crypto assets trade on registered platforms without further congressional action. The agency has been pressing its own rulemaking, including proposals to define event contracts as swaps and plans to bring crypto exchanges under federal oversight.

Selig highlights on-chain traceability as regulatory advantage

Chairman Selig stated that on-chain traceability provides a regulatory advantage for U.S. authorities. He noted that the ability to trace transactions on-chain, even when obfuscation tools are used, gives regulators "a lot of potential to be really cop on the beat here".

Because crypto enables funds to transfer much more rapidly than in conventional markets, attackers are able to utilize tools such as Tornado Cash to hide their tracks. Selig downplayed the role of blockchain technology in the recent breach. He stated the exploit did not break Ethereum or its smart contracts but was introduced from a laptop, similar to incidents in traditional markets.