<p class="is-style-lead">An X wallet for OKX Web3 confirmed in a post that a deprecated smart contract on OKX DEX had been compromised.</p> 
<p>While the official post-mortem is yet to come, analysts at SlowMist said <a href="https://x.com/SlowMist_Team/status/1734790816806449567?s=20" target="_blank">in an X post</a> that <a href="https://crypto.news/tag/okx/" target="_blank" rel="noreferrer noopener">OKX</a> DEX proxy admin owner’s private key was likely leaked, allowing hackers to take over the protocol and change its functionality. </p> 
<p>Once the protocol was upgraded with malicious functions, attackers began calling the <a href="https://crypto.news/tag/dex/" target="_blank" rel="noreferrer noopener">DEX</a> proxy contract to steal tokens from users, who previously gave the protocol permission to interact with their wallets.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">🚨SlowMist Security Alert: OKX DEX Proxy Admin Owner's Private Key Suspected to be Leaked🚨<br><br>According to information from SlowMist Zone, the OKX DEX contract appears to have encountered an issue. After SlowMist's analysis, it was found that when users exchange, they authorize…</p>— SlowMist (@SlowMist_Team) <a href="https://twitter.com/SlowMist_Team/status/1734790816806449567?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 13, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p> You might also like: <a href="https://crypto.news/smart-contract-exploit-in-time-token-leads-to-188k-loss/"> Smart contract exploit in TIME token leads to $188k loss </a> </p> 
<p>According to preliminary estimations, users lost over $430,000 worth of crypto. The attacker’s address is holding $70,000 worth of USDC, $70,000 worth of ELON as well as dozens of thousands of dollars in USDT, BTT and other altcoins, according to Etherscan <a href="https://etherscan.io/address/0x1F14E38666cDd8e8975f9acC09e24E9a28fbC42d" target="_blank" rel="noopener">data</a>.</p> 
<figure class="wp-block-image size-large">
 <img loading="lazy" decoding="async" width="1024" height="445" src="https://crypto.news/app/uploads/2023/12/hbsdilufhds-1024x445.png" alt="OKX DEX suffers exploit resulting in over $430k loss - 22" class="wp-image-14226862">
 <figcaption class="wp-element-caption">
  The attacker’s wallet | Source: Etherscan
 </figcaption>
</figure> 
<p>The OKX Web3 team <a href="https://x.com/okxweb3/status/1734794114657657004?s=20" target="_blank" rel="noreferrer noopener">noted</a> it has revoked the contract permissions and is now working with “relevant agencies to locate the stolen funds.” The developers have also committed to reimburse affected users with $370,000. OKX DEX is a non-custodial crypto exchange aggregator developed by the OKX crypto exchange, which allows users to trade crypto without the need for intermediaries.</p> 
<p> Read more: <a href="https://crypto.news/kyberswap-hacker-demands-full-control-after-47m-exploit/"> KyberSwap hacker demands full control after $47m exploit </a> </p>

OKX DEX suffers exploit resulting in over $430k loss

crypto.news

Other articles published on Dec 13, 2023

Web3 gaming: a 2023 industry overview

NEOPIN and AIRian Join Forces to Transform the Future of Running with Web 3.0 Integration

BTC’s Round Trip Week Likely Caused By Short-Term Profit Taking

AML Wallet Checks: Safeguarding Your Digital Assets

After Bitcoin’s Rally, What’s Next? 3 Altcoins Still Gaining Momentum

Three Arrows Capital’s Su Zhu faces heat in Singapore ahead of release

Join our free newsletter for daily crypto updates!