Blur

Read

<p class="is-style-lead">Blockchain security company CertiK has issued an urgent update to OKX wallet users on iPhone following the discovery of a major security vulnerability in the iOS application.</p> 
<p>In a post dated Dec. 19 on X, CertiK urgently advised OKX wallet users on iPhones to upgrade their app to the latest version. The security flaw identified in the OKX iOS application posed a risk of compromising sensitive user data and cryptocurrency assets.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/CertiK/status/1737110916699959433 
 </div>
</figure> 
<p>Earlier this month, Certik identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, “leading to potential compromise of sensitive data and crypto assets,” the blockchain security firm added.</p> 
<p> You might also like: <a href="https://crypto.news/okx-dex-suffers-exploit-resulting-in-over-430k-loss/"> OKX DEX suffers exploit resulting in over $430k loss </a> </p> 
<p>In response, OKX released an update to their iOS application, version 6.45.0, on Dec. 19, addressing this vulnerability. CertiK later confirmed that the security issue had been resolved and stated that no customer assets were affected by this vulnerability.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Thanks <a href="https://twitter.com/CertiK?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@Certik</a> for the note. <br><br>We've completed the relevant upgrade &amp; this is no longer an issue. We have verified that this did not impact any customer assets. <br><br>The fix has been deployed to iOS version 6.45.0 &amp; we recommend you update the app asap. <a href="https://t.co/5HfOnATPeu" target="_blank">pic.twitter.com/5HfOnATPeu</a></p>— OKX (@okx) <a href="https://twitter.com/okx/status/1737151226557387206?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 19, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="quick-disclosure-sparks-debate">Quick disclosure sparks debate</h2> 
<p>However, this incident has raised concerns about the disclosure of such vulnerabilities. MetaMask lead Tay Monahan expressed criticism over the timing of the vulnerability’s disclosure, suggesting that revealing the issue on the same day as the release of the fix could leave many users at risk.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/tayvano_/status/1737143247980605531 
 </div>
</figure> 
<p>Monahan highlighted the time it typically takes for a user base to update to the latest version of an app, which could range from weeks to months.</p> 
<p>Adding to the confusion, there was some discrepancy in the version number of the update containing the fix. While CertiK referred to the updated version as 6.46.0, OKX mentioned version 6.45.0, which was actually released on Dec. 11. The exact version containing the necessary security fix remains unclear.</p> 
<p>This incident underscores the vulnerability of cryptocurrency wallets and exchanges to cyber attacks. Recent months have seen a surge in such incidents, including a<a href="https://crypto.news/justin-sun-offers-5-bounty-as-poloniex-losses-cross-100-million/"> $114 million</a> theft from Poloniex in November, a <a href="https://crypto.news/operations-resume-on-htx-after-suspicious-transfers-lead-to-100m-combined-exploit/">$100 million heist</a> involving HTX and the Heco cross-chain bridge, and a <a href="https://crypto.news/atomic-wallet-security-breach-causes-over-35-million-in-losses/">$35 million loss</a> by Atomic wallet users in June following an iOS app update.</p> 
<p>Hackers’ continuous targeting of these platforms highlights the critical need for robust security measures in the cryptocurrency industry.</p> 
<p> Read more: <a href="https://crypto.news/okx-nft-marketplace-overtakes-opensea-and-blur-in-trading-volume/"> OKX NFT marketplace overtakes OpenSea and Blur in trading volume </a> </p>

CertiK urges immediate iOS update for OKX users amidst major security risk

Table of Contents

crypto.news

Other articles published on Dec 20, 2023

Ethereum (ETH) Price Eyeing Rally to $2,700 Amid Strong Exchange Outflows

Hedera (HBAR) Price Increased More Than 4% Within 24 hours

Bitcoin Analyst Shares a Scenario Where BTC Could Hit a New All-Time High Before Halving

IOSCO Releases Nine DeFi Policy Recommendations

3 Shiba Inu (SHIB) Recovery Strategies to Watch out For

Blockchain Technology: A Beacon of Hope Amidst Energy Crisis

Join our free newsletter for daily crypto updates!