Proxy

Million

Arkham

Uno Re

<a href="https://bitcoinworld.co.in/okx-dex-suffers-2-7-million-exploit-following-suspected-private-key-leak/" title="OKX DEX Suffers $2.7 Million Exploit Following Suspected Private Key Leak" rel="nofollow"></a>
<ul> 
 <li style="font-weight: 400">OKX DEX appears to have suffered a $2.7 million exploit following a private key leak, according to security analysts.</li> 
 <li style="font-weight: 400">The team confirmed a deprecated smart contract on OKX DEX had been compromised, promising to reimburse affected users.</li> 
</ul> 
A decentralized exchange (DEX) aggregator from OKX appears to have suffered a $2.7 million exploit, according to security analysts. 
The attack may have resulted from the DEX’s admin private key leak, security firm SlowMist posted on <a href="https://x.com/SlowMist_Team/status/1734790816806449567?s=20">X</a>. Shortly after, OKX confirmed a deprecated smart contract on OKX’s DEX had been compromised, promising to reimburse affected users. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">SlowMist Security Alert: OKX DEX Proxy Admin Owner's Private Key Suspected to be Leaked<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 According to information from SlowMist Zone, the OKX DEX contract appears to have encountered an issue. After SlowMist's analysis, it was found that when users exchange, they authorize… 
 — SlowMist (@SlowMist_Team) <a href="https://twitter.com/SlowMist_Team/status/1734790816806449567?ref_src=twsrc%5Etfw">December 13, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
“We regret to inform you that a deprecated smart contract on OKX DEX has been compromised. We have taken immediate action to secure all user funds and revoke the contract permissions. We are working with relevant agencies to locate the stolen funds and will reimburse affected users,” the platform stated on X. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 We regret to inform you that a deprecated smart contract on OKX Dex has been compromised. We have taken immediate action to secure all user funds and revoke the contract permissions. We are working with relevant agencies to locate the stolen funds and will reimburse affected… <a href="https://t.co/zDIjhb3ETz">pic.twitter.com/zDIjhb3ETz</a> 
 — OKX Web3 (Wallet | DeFi | NFT) (@okxweb3) <a href="https://twitter.com/okxweb3/status/1734794114657657004?ref_src=twsrc%5Etfw">December 13, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Security analysts at PeckShield later confirmed the exploit, stating that it resulted in approximately $2.7 million worth of crypto assets stolen. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> <a href="https://twitter.com/hashtag/OKX?src=hash&amp;ref_src=twsrc%5Etfw">#OKX</a> <a href="https://twitter.com/hashtag/DEX?src=hash&amp;ref_src=twsrc%5Etfw">#DEX</a> suffered a Private Key Leakage attack, resulting in ~$2.76M worth of cryptos being stolen. Please *Revoke* your allowance if any, to <a href="https://t.co/uwzzJzNUHH">https://t.co/uwzzJzNUHH</a> <a href="https://t.co/yOqAVR2HMR">pic.twitter.com/yOqAVR2HMR</a> 
 — PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1734841998077812923?ref_src=twsrc%5Etfw">December 13, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Blockchain data analytics provider Arkham also confirmed OKX DEX was exploited by a hacker who likely upgraded a deprecated contract with token approvals, resulting in losses of over $2.7 million.&nbsp; 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 New Intel Exchange Bounty: OKX DEX Exploit 
 We've created and funded a bounty to help identify the person or organization behind the recent OKX DEX exploit. 
 OKX DEX was exploited by a hacker who upgraded a deprecated contract with token approvals, resulting in losses of over… <a href="https://t.co/kakhpb05NV">https://t.co/kakhpb05NV</a> <a href="https://t.co/k5ztEm51bW">pic.twitter.com/k5ztEm51bW</a> 
 — Arkham (@ArkhamIntel) <a href="https://twitter.com/ArkhamIntel/status/1734887821633098164?ref_src=twsrc%5Etfw">December 13, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
It also suggested that the attacker was tied to other exploits, including LunaFi, Uno Re and RVLT. Arkham also offered a bounty of 5,000 ARKM ($2,250) for information to help identify the hacker or lead to the return of funds. 
See Also: <a class="row-title" href="https://bitcoinworld.co.in/microsoft-warns-that-cybercriminals-can-exploit-oauth-applications/" aria-label="“Microsoft Warns That Cybercriminals Can Exploit OAuth Applications” (Edit)">Microsoft Warns That Cybercriminals Can Exploit OAuth Applications</a> 
SlowMist said users authorize token exchanges on the DEX via the TokenApprove contract. The DEX contract can then transfer these tokens by invoking TokenApprove’s functionality.&nbsp; 
A key component in this process is the DEX Proxy, managed by the Proxy Admin. The Proxy Admin Owner has the authority to upgrade the DEX Proxy contract, enabling it to call the claimTokens function of the TokenApprove contract for token transfers. 
“This attack may be a result of the Proxy Admin Owner’s private key being leaked,” SlowMist added, with the current owner implementing a significant upgrade to the DEX Proxy contract on Dec. 12 at 22:23 UTC.&nbsp; 
This upgrade altered the contract’s functionality, allowing it to directly call the claimTokens function of the DEX contract for token transfers — opening up a vulnerability that attackers exploited to steal tokens. 
The post <a href="https://bitcoinworld.co.in/okx-dex-suffers-2-7-million-exploit-following-suspected-private-key-leak/">OKX DEX Suffers $2.7 Million Exploit Following Suspected Private Key Leak</a> appeared first on <a href="https://bitcoinworld.co.in">BitcoinWorld</a>.

OKX DEX Suffers $2.7 Million Exploit Following Suspected Private Key Leak

ItsBitcoinWorld

Other articles published on Dec 14, 2023

BONK price blasts 53% over Coinbase listing, Solana follows

Bull Alert from Prominent Analyst: Reviewed Cardano (ADA), Worldcoin (WLD) and Shiba Inu (SHIB)

Bitcoin Price Rips Higher But $43K Is The Key To More Upsides

OKX’s OKB repurchase hits record $630m in burning event

Insomniac Games Delays Key Features for Marvel’s Spider-Man 2 Until Early 2024

Brian May Proclaims 2023 as the Last Year of Human Songwriting in the Era of AI Dominance

Join our free newsletter for daily crypto updates!