President Donald Trump said his administration is reviewing the reported Binance breach after the exchange said unauthorized withdrawals caused roughly $6.3 billion in losses, putting a fresh spotlight on offshore crypto platforms and stalled U.S. market-structure legislation.
Speaking at a Friday afternoon press conference, Trump said Binance had indicated that affected customers would be made whole. Binance separately said it has $6.34 billion available to cover losses from the incident, which it said began Thursday.
The exchange said an attacker gained access after compromising the laptop of a DevOps engineer, a role that typically manages the systems used to deploy and maintain software. The compromised device gave the attacker access to a service container, Binance said, allowing the submission of unauthorized withdrawal transactions.
TRM Labs attributed the attack to TraderTraitor, a North Korean hacking unit that U.S. authorities and cybersecurity researchers have previously linked to campaigns targeting cryptocurrency companies and their employees.
Cftc chair points to offshore regulatory gap
Commodity Futures Trading Commission Chair Michael Selig said Friday that Binance is not federally regulated by the agency, tying the episode to the risks faced by U.S. users dealing with offshore trading venues outside the CFTC's direct oversight.
Selig's remarks arrived as the CFTC seeks expanded authority over parts of the crypto market. On Oct. 5, the agency proposed a federal framework covering leveraged and margined retail crypto transactions. The proposal would also create a registration category for exchanges offering those products.
Such rules would address a narrower set of activities than the security controls implicated in Binance's reported breach. Registration and trading oversight could give regulators greater visibility into certain platforms serving U.S. customers, while cyber defenses, internal access controls and wallet-management systems would remain operational responsibilities for the companies themselves.
The Binance incident nevertheless gives momentum to lawmakers arguing that crypto trading platforms need clearer federal rules. The exchange's reported ability to cover the losses may limit immediate customer damage, but it does not resolve questions over how offshore platforms safeguard assets, disclose risks, or coordinate with U.S. authorities after a major attack.
Market-structure fight returns to capitol hill
The breach also revived debate around the Clarity Act, a broad cryptocurrency market-structure bill that passed the House last year before stalling in the Senate.
Senator Cynthia Lummis, the Republican senator from Wyoming, described the reported theft as more than $6 billion taken in less than four hours and called it the largest heist in history. Her comments focused attention on whether legislation governing stablecoin issuers and trading platforms could have helped restrict the movement of stolen funds.
Amanda Fischer of Better Markets argued that the bill would require stablecoin issuers to freeze assets under a court order. Patrick Wilson, general counsel at the Solana Policy Institute, disputed that characterization, pointing to language he said protects stablecoin issuers from private lawsuits when they impose voluntary, temporary holds based on a reasonable belief that a law may have been violated.
That dispute illustrates a practical limitation in the legislative debate: freezing assets is rarely automatic, especially when funds move rapidly through multiple wallets, bridges or non-custodial services. Stablecoin issuers can sometimes block tokens under their control, but the speed and scope of any intervention depend on the asset involved, the issuer's policies and its ability to identify the relevant addresses.
The Clarity Act's Senate prospects had already been complicated by Democratic concerns over Trump's cryptocurrency-related business interests. The report described those interests as having grown to hundreds of millions of dollars through links to World Liberty Financial and the TRUMP memecoin. The Binance breach now gives Republican supporters another argument for moving a bill that defines which federal agencies oversee different areas of the digital-asset market.
Industry group calls for cftc powers
Cody Carbone, chief executive of the Digital Chamber, urged House and Senate leaders on Friday to pass legislation giving the CFTC authority over crypto exchanges. In a letter to congressional leadership, Carbone also called for rules requiring the separation of customer funds from company assets during bankruptcy proceedings.
Customer-asset segregation has become a central policy demand since the collapse of several crypto businesses in recent years. It would not prevent an external hack, but it could reduce the risk that customer balances are treated as part of a failed company's general estate if an exchange later enters insolvency proceedings.
Representative Tom Timmons, the Republican congressman from South Carolina, framed the Binance attack as a national-security concern, warning that hostile governments could use digital assets to finance nuclear weapons and ballistic-missile programs. The reported attribution to North Korea gives that argument particular force, since North Korean cyber groups have repeatedly been accused of using stolen cryptocurrency to generate funds outside conventional financial channels.
Binance's record remains under scrutiny
Binance enters the latest episode with a substantial regulatory history in the United States. In 2023, former chief executive Changpeng Zhao pleaded guilty to failing to maintain adequate anti-money-laundering controls under a settlement that required Binance to pay about $4 billion. Zhao was later pardoned by Trump.
The reported breach therefore lands amid two separate but connected debates: whether exchanges can protect customer assets from sophisticated attackers, and whether U.S. agencies have sufficient authority over platforms that operate beyond American borders while still reaching U.S. users.
Binance's pledge to cover the reported $6.3 billion loss will be closely watched as customers assess whether reimbursements occur promptly and whether the exchange provides a fuller accounting of the compromised systems. In Washington, the attack has supplied a concrete test case for lawmakers weighing whether market rules, stablecoin controls and exchange oversight can keep pace with thefts executed at internet speed.
Worried about hacks like Binance’s? Strengthen your defenses with Toobit’s crypto safety standards guide today.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
