Binance hack hands Washington a fresh argument over exchange rules days before the vote

The record theft from Binance has turned into a policy argument in Washington. On Friday, the chairman of the Commodity Futures Trading Commission said the breach supports the exchange rules his agency floated this month. The president said U.S. officials were still looking at whether North Korea was responsible. Lawmakers and lobbyists split along familiar lines about whether the stalled market structure bill would have changed anything. All of this came days before U.S. voters finish casting ballots on Nov. 3, and while Binance withdrawals were still frozen.

What happened

The facts of the incident have not changed much since Friday. Attackers drained about $6.3 billion from Binance hot wallets on Oct. 29. Blockchain analytics firms TRM Labs and Chainalysis have linked the theft to TraderTraitor, a unit tied to North Korea, and the FBI and the Secret Service have opened an investigation. Binance says it has set aside more than $6.34 billion of company money to cover losses, and that about $3 billion of the stolen assets has been frozen with help from token issuers and other firms. Its latest update said withdrawals would come back in stages from around Nov. 1, with proof-of-reserves results due before Nov. 2.

What is new is the reaction in the U.S. capital. CFTC Chairman Michael Selig told CNBC on Friday that the breach backs up the agency's case for crypto market rules. "The real issue here is that these are unregulated offshore exchanges," he said. Selig wants to give such venues what he calls a federal option: register with the CFTC and meet U.S. cybersecurity standards. He also said the attack did not break Ethereum or its smart contracts, and that the flaw came from inside the company's own systems.

The plan he is promoting is an advance notice of proposed rulemaking that the CFTC released on Oct. 5 and published in the Federal Register on Oct. 13. It contains no rule text yet. It asks how the agency should oversee retail crypto trades that use leverage, margin or financing, which fall under an existing section of the Commodity Exchange Act. It also floats a new kind of designated contract market built for crypto. The questions cover listing standards, proof of reserves for pooled customer accounts, anti-money-laundering checks, conflicts of interest and system safeguards. Comments are due in mid-December.

The key limit is that registration would be voluntary. Selig has said the CFTC cannot force all crypto trading onto registered platforms without new law from Congress. Spot-only exchanges that do not offer leverage could stay under state licences. That means the framework, even once finished, would not have reached a venue like Binance.com unless it chose to sign up.

President Donald Trump took a question on the hack at a news conference on Friday. He said the government did not yet know whether North Korea was behind it and was looking into it. He also noted that Binance had promised to restore the funds, and called crypto somewhat risky.

The debate

The two parties drew different lessons. Sen. Cynthia Lummis of Wyoming, one of the Republicans negotiating the market structure bill known as the Clarity Act, wrote on X that it would have given crypto firms legal cover to freeze suspicious transfers as soon as law enforcement called. The House passed the bill in 2025, but it has been stuck in the Senate since a 49–50 cloture vote failed on Sept. 15. Part of that fight is over ethics provisions that would bar officials and their families from issuing or profiting from digital assets.

Not everyone agrees with Lummis's reading. Amanda Fischer, policy director at the advocacy group Better Markets, told The Block that the bill would have required stablecoin issuers to freeze assets under a court order. She added that issuers had already moved as fast as they could this week. Patrick Wilson of the Solana Policy Institute disagreed, pointing to a section that shields issuers from private lawsuits over voluntary, temporary holds. Either way, the freezing tools in dispute would mainly reach tokens like USDT and USDC. Bitcoin and ether cannot be frozen by any single company.

Rep. Maxine Waters, a California Democrat, called the hack a wake-up call for the industry. She blamed what she described as the deregulatory push of the White House and congressional Republicans. Her statement also brought up Binance's ties to the Trump family's crypto ventures, the SEC's decision to drop its case against Binance and founder Changpeng Zhao, and Trump's pardon of Zhao. Rep. Tom Timmons, a South Carolina Republican, raised a different concern on X: hostile states using digital assets to fund weapons programs.

Industry groups are pushing for speed. Cody Carbone of The Digital Chamber, a trade group, wrote to House and Senate leaders on Friday. He asked them to pass a bill that gives the CFTC authority over crypto exchanges and keeps customer money separate from company money if a firm fails. His argument is that regulators today can only act once the damage is done, and he urged Congress to move before it adjourns. The letter did not point to a specific bill.

What it means

For U.S. policy, the hack sharpens a question that was already open. The CFTC can build a voluntary federal path on its own, but only Congress can make that path mandatory or reach spot-only venues offshore. With the Senate stalled and an election on Tuesday, any new law would have to wait at least for the post-election session. The SEC is working on its own track. Its proposed Regulation Crypto Assets, which covers token offerings, closed for comment on Oct. 20.

Other jurisdictions are watching from different positions. Binance does not hold a license under the EU's Markets in Crypto-Assets rules. ESMA and several national regulators began questioning its use of the "reverse solicitation" exemption earlier this month. In Singapore, Binance.com has been on the Monetary Authority of Singapore's Investor Alert List since 2021. The Straits Times reported that there is no public way to tell whether Singapore residents were affected.

The market reaction is visible in fund flows. U.S. spot bitcoin ETFs saw about $643 million in net outflows on Oct. 30, the first full trading day after the hack and the largest one-day withdrawal since June, according to Farside data. Rival exchanges are also adjusting. Coinbase told Reuters it had made precautionary changes to the systems that hold its keys offline, and OKX's chief executive has called for a shared real-time alert system so firms can flag and freeze stolen funds.

Three things to watch next. The first is whether Binance reopens withdrawals on schedule and publishes a technical post-mortem that explains how an internal service could move billions. The second is how many comments, and of what kind, the CFTC's notice draws before its December deadline. The third is whether Senate leaders bring the Clarity Act or a narrower exchange bill back after the election.

This article is for information only and is not investment advice.

Sources

• Decrypt · Binance hack shows why offshore exchanges need US oversight, CFTC chair says
• The Block · Trump says they're looking into Binance hack as calls grow for crypto rules
• Cointelegraph · Binance $6.3B record hack sparks pre-election political chatter
• Baker Botts · CFTC launches crypto market structure rulemaking
• crypto.news · CFTC advances voluntary crypto exchange registration as Congress stalls
• The Star / The Straits Times · No way to tell if Singapore investors affected by Binance hack