Insider Threat

State of play.

• The CFTC has established prediction markets as an insider trading enforcement priority, with Director Miller naming Commodity Exchange Act Section 6(c)(1) as the statutory hook and the Van Dyke prosecution as the first live case .
• DOJ-SDNY and the CFTC filed parallel criminal and civil charges against a U.S. Army Special Forces officer who used classified intelligence about Operation Absolute Resolve to trade on Polymarket, netting approximately $404,000 — the first enforcement action of its kind targeting an event contract platform .
• Congress has moved to cut off its own access, with the Senate unanimously prohibiting senators and staff from trading on prediction markets — a structural acknowledgment that nonpublic government information creates inherent conflicts on these platforms .
• Democratic senators have demanded SEC and DoD investigations into well-timed trades anticipating Trump administration policy announcements, extending the insider-information concern from military intelligence to executive branch policy .
• For counsel advising financial services clients, government contractors, or any entity whose personnel hold nonpublic information, the practical baseline is that prediction market activity is now squarely within the anti-fraud enforcement perimeter — existing commodities and securities fraud statutes apply, and the CFTC has signaled it will pursue these cases aggressively.

Where things stand.

• Prediction markets are now subject to the same anti-fraud framework as traditional markets. The Van Dyke prosecution establishes that Commodity Exchange Act Section 6(c)(1) reaches event contracts, and the CFTC has named prediction market insider trading as its top enforcement priority .
• Parallel DOJ-CFTC enforcement is the operative model. The Van Dyke case features simultaneous criminal charges from DOJ-SDNY and civil charges from the CFTC — the same dual-track structure that governs traditional securities and commodities enforcement .
• The CFTC's cooperation policy has been restructured around a binary declination framework. Self-reporters who cooperate fully and remediate — including root-cause analysis, compliance upgrades, and disgorgement — face a clear path to no enforcement action; non-cooperators face heightened scrutiny and potential DOJ criminal referral .
• The SEC has signaled a lighter regulatory touch at the macro level, but the March 2026 SEC Speaks conference confirmed that core fraud and insider trading enforcement remains active .
• Congressional participation in prediction markets is now prohibited at the Senate level, with the House having passed related restrictions — removing the most obvious source of legislative-branch MNPI from these platforms .
• External social engineering targeting executives is escalating as an insider-threat vector. Former Black Basta affiliates are running automated campaigns against C-suite personnel in manufacturing and professional services — credential theft followed by ransomware or extortion, with the attack cycle completing in under 12 minutes .
• The policy-trade nexus is under active investigative pressure. Democratic senators have formally requested SEC and DoD scrutiny of trades that anticipated Trump administration policy moves, creating a live political and regulatory flashpoint around executive branch MNPI .

Latest developments.

• DOJ-SDNY and CFTC filed parallel charges against Army Special Forces Master Sergeant Van Dyke for using classified intelligence about Operation Absolute Resolve to trade on Polymarket — the CFTC's first insider trading enforcement action targeting event contracts .
• CFTC simultaneously brought disciplinary action against three Kalshi traders who wagered on their own political campaigns .
• Senate voted unanimously to prohibit senators and staff from trading on prediction markets, effective immediately .
• CFTC Enforcement Director Miller outlined five enforcement priorities at NYU Law School, with prediction market insider trading under CEA Section 6(c)(1) listed first, and previewed a revised binary-declination cooperation policy .
• Democratic senators formally demanded SEC and DoD investigations into well-timed trades anticipating Trump policy announcements .
• ReliaQuest documented a sharp escalation in automated social engineering attacks by former Black Basta affiliates targeting C-suite executives, with 77 percent of March 2026 incidents directed at leadership roles .
• SEC Enforcement Division outlined priorities at March 2026 SEC Speaks conference, signaling continued focus on core fraud while adopting a lighter touch on technical violations .

Active questions and open splits.

• What statutory theory supports the Van Dyke charges? The specific charges remain under seal, leaving open whether DOJ is proceeding under securities fraud, commodities fraud, or a military-specific statute — a question that will define the scope of the precedent for non-military MNPI holders .
• How far does CEA Section 6(c)(1) reach into event contracts? The CFTC's first enforcement action establishes the hook but not its outer limits — whether the same theory applies to corporate MNPI (earnings, M&A) traded on prediction markets is unresolved .
• Does executive branch policy information constitute MNPI on prediction markets? The Democratic senators' demand for SEC and DoD investigations raises the question of whether nonpublic knowledge of administration policy decisions — tariffs, sanctions, military operations — triggers existing anti-fraud statutes when traded on event contracts .
• Will the Senate ban extend to broader federal regulation of the platforms themselves? The unanimous Senate vote addresses congressional participation but leaves open licensing requirements, tax treatment, and compliance obligations for Kalshi, Polymarket, and similar platforms .
• How does the CFTC's binary-declination framework interact with DOJ criminal referral risk? The cooperation policy creates a self-reporting incentive, but the Van Dyke case demonstrates that DOJ can proceed independently — the declination path may not insulate against criminal exposure where national security or aggravating factors are present .
• What duty of care do employers owe when executives are targeted by automated social engineering? The Black Basta affiliate campaign operates faster than standard incident response protocols, raising questions about whether existing cybersecurity frameworks — and the legal duties they create — are adequate for sub-12-minute attack cycles .

What to watch.

• Unsealing of the Van Dyke charges — the statutory theory will define whether corporate MNPI holders face analogous exposure on prediction markets.
• Whether the CFTC releases the full revised cooperation advisory and how it addresses prediction market participants specifically.
• SEC or DoD response to Democratic senators' investigation demands regarding policy-anticipating trades.
• Whether additional prediction market insider trading cases follow the Van Dyke model — particularly cases involving corporate rather than classified government information.
• Senate Commerce Committee hearings on prediction market regulation and whether they produce licensing or compliance obligations for the platforms.
• Whether the Black Basta affiliate campaign produces a publicized breach that triggers regulatory or litigation scrutiny of corporate incident response adequacy.