Proxy

Security

Image Source: Adobe 
OKX DEX, a decentralized exchange and cross-chain bridge aggregator, has been exploited, with some wallets authorized to the platform losing around $400,000.&nbsp; 
According to analysis conducted by blockchain security firm SlowMist, the issue revolves around the authorization process when users engage in exchanges on the platform.&nbsp; 
Specifically, users authorize the TokenApprove contract, through which the DEX contract transfers the authorized tokens.&nbsp; 
The DEX contract includes a claimTokens function that allows a trusted DEX Proxy, managed by the Proxy Admin, to make calls and transfer tokens on behalf of users. 
On December 12, the Proxy Admin Owner upgraded the DEX Proxy contract to a new implementation contract via the Proxy Admin.&nbsp; 
The new implementation contract introduced a functionality that directly called the claimTokens function of the DEX contract to transfer tokens.&nbsp; 
Subsequently, attackers took advantage of this upgrade and started exploiting the DEX Proxy by making unauthorized calls to steal tokens.&nbsp; 
The Proxy Admin Owner performed another contract upgrade at 23:53:59 on the same day, employing a similar functionality, which further enabled the ongoing token theft.&nbsp; 
“This attack may be a result of the Proxy Admin Owner’s private key being leaked,” SlowMist said. “Currently, the DEX Proxy has been removed from the trusted list.” 
SlowMist Security Alert: OKX DEX Proxy Admin Owner's Private Key Suspected to be Leaked 
According to information from SlowMist Zone, the OKX DEX contract appears to have encountered an issue. After SlowMist's analysis, it was found that when users exchange, they authorize… 
— SlowMist (@SlowMist_Team) <a href="https://twitter.com/SlowMist_Team/status/1734790816806449567?ref_src=twsrc%5Etfw">December 13, 2023</a> 
<h2 id="okx-says-18-addresses-were-hacked">OKX Says 18 Addresses Were Hacked</h2> 
 &nbsp;In a comment to crypto journalist Wu Blockchain,&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/digital-asset-exchange-okx-joins-ethereum-climate-platform-to-foster-sustainability.htm" target="_blank" rel="noopener">OKX</a>&nbsp;reportedly said that 18 address assets authorized for the contract were hacked. 
The exchange attributed the incident to “the hack of the management rights of an abandoned OKX DEX market maker contract.” 
“The affected contracts have been deactivated and all user assets have been confirmed to be safe,” Wu Blockchain wrote.&nbsp; 
The exchange estimated the amount of stolen funds at $370,000, while pledging to compensate the affected users.&nbsp; 
OKX stated that due to the hack of the management rights of an abandoned OKX DEX market maker contract, 18 address assets authorized for the contract were hacked. The affected contracts have been deactivated and all user assets have been confirmed to be safe. All affected users… 
— Wu Blockchain (@WuBlockchain) <a href="https://twitter.com/WuBlockchain/status/1734790628385649016?ref_src=twsrc%5Etfw">December 13, 2023</a> 
<h2 id="okx-enjoys-growing-market-share-as-binance-bleeds">OKX Enjoys Growing Market Share as Binance Bleeds</h2> 
 Year-to-date, crypto exchanges&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/upbit-crypto-exchange-operator-dunamu-suffers-82-drop-in-profits.htm" target="_blank" rel="noopener">Upbit</a>,&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/crypto-execs-argue-bull-run-could-lead-to-100000-btc-in-2024-more-news.htm" target="_blank" rel="noopener">Bybit</a>, and OKX have&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/okx-and-bybit-capitalize-as-binances-market-share-declines-more-news.htm" target="_blank" rel="noopener">made the largest gain</a>&nbsp;in spot market share, according to on-chain analytics firm CCData’s Exchange Review.&nbsp; 
They increased their dominance by 6.39%, 4.89%, and 3.86% to 9.20%, 5.80%, and 7.41%, respectively. 
Meanwhile,&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/former-binance-ceo-czs-guilty-plea-accepted-by-us-judge.htm" target="_blank" rel="noopener">Binance</a>,&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/cyprus-impose-strict-penalties-unlicensed-crypto-service-providers-report.htm" target="_blank" rel="noopener">BeQuant</a>, and&nbsp;<a class="editor-rtfLink" href="https://cryptonews.com/news/crypto-com-gains-key-uk-regulatory-approval-as-electronic-money-institution.htm" target="_blank" rel="noopener">Crypto.com</a>&nbsp;continue to see the highest decline in market share by spot trading volume, falling by 19.5%, 3.28%, and 2.96% to 31.8%, 0.45%, and 2.03%, respectively. 
Looking at derivatives volumes, OKX and Bybit had the highest increase in market share, rising by 2.75% and 0.61% to 24.9% and 14.2%, respectively. 
Binance, however, saw the highest decline in market share last month, falling by 2.30% to 47.6%, which was the exchange’s lowest derivatives market share since October 2020. 
That said, Binance was the largest derivatives exchange in November by monthly volume, trading $1.26 trillion (up 30.5% compared to October), followed by OKX ($660 billion, up 53.8%) and Bybit ($375 billion, up 42.9%). 
OKX and Bybit were the best-performing derivatives exchanges in the last month, recording an increase of 53.8% and 42.9%, respectively.

OKX DEX Exploited: Wallets Authorized to the Exchange Lost Approximately $370,000

Table of Contents

Cryptonews.com

Other articles published on Dec 13, 2023

Bitget invests in Morph layer 2 network

AI’s Impact on Coders and Software Developers: Augmentation, Not Replacement

CFTC Chair clarifies crypto assets as commodities amid regulatory struggle

Bitcoin Surges Amid ETF Approval Speculations

World’s First Fully Autonomous Restaurant Opens in Pasadena, California

Bitcoin Exchange Binance Announces This Altcoin Will Support Network Upgrade!

Join our free newsletter for daily crypto updates!