Key Takeaways
- Terry Duffy rejects the argument that decentralized venues are neutral plumbing, warning that exchange operators hold legal accountability for orderly trading.
- Under US commodities law, market operators must enforce Core Principle 9, which requires institutions to actively police access rather than shifting the burden onto traders.
- Venues offering extreme margin positions up to 250% rely on auto-liquidation engines that can trigger sudden, cascading selloffs across broader markets.
- Permitting American traders to bypass geo-blocks using virtual private networks fails regulatory muster and exposes operators to federal scrutiny.
- Winning in domestic markets requires full compliance with Know Your Customer (KYC) standards, regardless of protocol-level decentralization.
The Disagreement
Founders of decentralized trading platforms argue that writing autonomous code absolves them of exchange obligations. On Odd Lots, Jeff Yan of Hyperliquid defended his platform as pure infrastructure: the protocol merely provides the software plumbing, while users and market deployers carry the responsibility for regulatory compliance.
Duffy, transitioning from CEO to executive chairman of CME Group, pushes back hard against that distinction. “I did hear what Jeff had made some comments on your program, essentially saying he does not need to be regulated, that the users need to be regulated,” Duffy said. “So they're basically the plumbing is what Jeff's argument is. I've talked to Jeff about this. I actually like him. I think he's a brilliant brilliant guy. But at the same time, you know, there's no KYC, or know your client. That's an issue.”
The conflict centers on how risk spreads. Hyperliquid allows users to borrow aggressively against small balances, automated by code that instantly dumps collateral when thresholds breach. “So when you look at some of the leveraged products being traded on Hyperliquid's platform, their leverage can go anywhere from say 10 to 15% to 250%,” Duffy noted. If prices drop fast, these auto-liquidation engines fire simultaneously, setting off cascading sell orders that freeze trading and drain market liquidity.
Who's Right (and When They're Wrong)
Yan is technically correct about smart contract mechanics. If an autonomous protocol settles balances entirely on-chain without human custodians, code executes without counterparty default in normal conditions. For crypto-native builders, shifting surveillance obligations to users feels like the natural extension of open-source software.
Duffy is right about financial reality and the law. First, margin cascades rarely stay contained within a single application. When volatile positions unwind at 250% margin, liquidations create price distortions that infect outside markets. Second, the Commodity Futures Trading Commission does not accept the software-only defense.
Duffy pointed directly to federal statutory obligations: “It's actually in violation of Core Principle 9, and I can go through all the nuances of Core Principle 9, but it's basically fair and and ready market access to all. But you have an obligation to make certain that you're policing these markets as an institution, not just as the user.” Turning a blind eye while domestic traders access offshore matching engines via VPNs fails that legal test.
What to Do With This
Audit your platform access controls before regulators audit them for you. Pull your application logs this week and check user IP addresses against known commercial VPN exit nodes. If restricted domestic users trade high-risk products on your frontend, implement strict IP intelligence blocking and establish identity verification protocols immediately.