CFTC Chairman Michael Selig used the Binance hack as an argument for federal rules for crypto exchanges. He said this on October 30 in a CNBC interview. The discussion concerns exchanges that operate outside the United States.
The CFTC is the U.S. regulator of the derivatives market. That is, futures, options and leveraged trades. Currently, it does not have full oversight over offshore crypto platforms.
This directly affects traders. Clients' money sits on the exchange, while the rules for its operation are still only being discussed.
What happened with Binance?
The incident began on October 29. Attackers gained access to wallets controlled by the exchange itself.
- about $6.3 billion in crypto assets - the volume of affected funds
- potentially the largest theft from an exchange in the industry's history
- corporate funds and emergency reserves - Binance promised to cover client losses from them
In parallel, the exchange sought to freeze the withdrawn assets.
Who is behind the attack?
The first version of the entry point was an infected laptop of an engineer who maintains the exchange's infrastructure. A further investigation revealed a more complex attack with multiple vulnerabilities.
Blockchain researchers linked it to the North Korean operation TraderTraitor.
Selig specifically emphasized: Ethereum itself and its smart contracts were not hacked. The platform's operational security failed. Public transaction records make it possible to track stolen funds even when attempts are made to cover tracks.
What rules is the CFTC preparing?
The CFTC draft itself appeared on October 5. These are separate rules for retail crypto trades with leverage, margin and financing.
- October 13. The document was published in the Federal Register. This is the official U.S. publication for regulatory acts.
- December 14, 2026. The public comment period closes.
- A new registration category. For eligible platforms - with requirements for cybersecurity, client protection, asset custody and trade oversight.
What does this mean for the trader?
The rules are not yet finalized. There is no authority to force every offshore spot exchange to register with the CFTC. Broad mandatory oversight would require a separate law.
The nearest date in this story is December 14, when the comment period closes. You can mark it in the economic calendar.
- Asset custody - currently the responsibility of the platform itself, not the regulator
- The exchange's operational security - what broke in this case
- An alternative to a personal deposit - working on the company's capital; how this is structured is explained in the academy
Did you check your balances on the exchange on October 29?
On days like this, you look first not at the chart but at your balances. The money sits on the platform, while the rules for it are being written in Washington and not before December. The second question is less pleasant: how much does movement on a personal deposit of a couple thousand even give you. In prop trading, the trading notional is provided by the company: a paid selection, its account, your share of the profit. Working through the scheme takes an evening, and it is calmer to do it before the next piece of news like this.