A massive security breach that drained roughly $6.36 billion from Binance in about 20 minutes has thrust the Commodity Futures Trading Commission’s (CFTC) proposed “federal option” for centralized exchanges into the spotlight, according to a report by TRM Labs cited by BeInCrypto.

What the Federal Option Entails

CFTC Chairman Michael Selig introduced the voluntary registration framework earlier this month after Congress stalled the Clarity Act, which would have mandated registration for all crypto exchanges. The option requires participating exchanges to keep customer assets separate from their own balances and to adhere to federal anti‑fraud regulations. In return, they would be permitted to offer leveraged trading to U.S. customers, a service currently restricted by existing payment‑license rules.

Binance Hack Highlights Gaps

The hack, which TRM Labs attributes to a stolen login rather than a failure of fund‑segregation rules, demonstrates that the federal option does not address credential‑theft vectors. Binance, which does not operate a U.S.‑focused platform, is outside the scope of the proposed rulebook. The exchange announced it would cover the losses, noting that about $3 billion of the stolen funds have already been frozen.

Potential Impact and Next Steps

If major U.S. exchanges such as Coinbase or Kraken adopt the CFTC’s framework, customer funds could gain an additional layer of protection through mandated segregation and federal oversight. However, the option remains voluntary, and adoption will likely hinge on how regulators balance consumer safety with market competitiveness. The CFTC has opened a comment period that runs until mid‑December, after which it will decide whether to formalize the rulebook.

What to Watch Next

Key indicators to monitor include the volume and nature of comments submitted during the CFTC’s open comment period, any formal commitments from U.S. exchanges to join the federal option, and further developments in the Binance investigation that could influence regulatory perspectives on credential‑based security measures.