Blur

Read

<div class="cryptonews">
 <p class="is-style-lead">Blockchain security company CertiK has issued an urgent update to OKX wallet users on iPhone following the discovery of a major security vulnerability in the iOS application.</p>
 <p>In a post dated Dec. 19 on X, CertiK urgently advised OKX wallet users on iPhones to upgrade their app to the latest version. The security flaw identified in the OKX iOS application posed a risk of compromising sensitive user data and cryptocurrency assets.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Attention! We urge <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> of OKX wallets to <a rel="noopener noreferrer nofollow" title="update" href="https://thebittimes.com/tag/update.html">update</a> their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE)&nbsp; vulnerability in the OKX iOS App,&nbsp; leading to potential compromise of sensitive data and…</p>— CertiK (@CertiK) December 19, 2023
   </blockquote>
  </div>
 </figure>
 <p>Earlier this month, Certik identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, “leading to potential compromise of sensitive data and crypto assets,” the blockchain security firm added.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> OKX DEX suffers exploit resulting in over $430k loss
 </div>
 <p>In response, OKX released an <a rel="noopener noreferrer nofollow" title="update" href="https://thebittimes.com/tag/update.html">update</a> to their iOS application, version 6.45.0, on Dec. 19, addressing this vulnerability. CertiK later confirmed that the <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> issue had been resolved and stated that no customer assets were affected by this vulnerability.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Thanks @Certik for the note. <br><br>We've completed the relevant upgrade &amp; this is no longer an issue. We have verified that this did not impact any customer assets. <br><br>The fix has been deployed to iOS version 6.45.0 &amp; we recommend you update the app asap. pic.twitter.com/5HfOnATPeu</p>— OKX (@okx) December 19, 2023
   </blockquote>
  </div>
 </figure>
 <h2 class="wp-block-heading" id="quick-disclosure-sparks-debate">Quick disclosure sparks debate</h2>
 <p>However, this incident has raised concerns about the disclosure of such vulnerabilities. MetaMask lead Tay Monahan expressed criticism over the timing of the vulnerability’s disclosure, suggesting that revealing the issue on the same day as the release of the fix could leave many users at risk.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Wait wait wait wait hold up<br><br>How long does it take their user base to get majority updated historically?<br><br>Like, it takes time to roll out updates. Like weeks, months.<br><br>And yet you’re disclosing there’s a vuln that could rekt all users remotely THE DAY OF?</p>— Tay (@tayvano_) December 19, 2023
   </blockquote>
  </div>
 </figure>
 <p>Monahan highlighted the time it typically takes for a user base to <a rel="noopener noreferrer nofollow" title="update" href="https://thebittimes.com/tag/update.html">update</a> to the latest version of an app, which could range from weeks to months.</p>
 <p>Adding to the confusion, there was some discrepancy in the version number of the update containing the fix. While CertiK referred to the updated version as 6.46.0, OKX mentioned version 6.45.0, which was actually released on Dec. 11. The exact version containing the necessary security fix remains unclear.</p>
 <p>This incident underscores the vulnerability of cryptocurrency wallets and exchanges to cyber attacks. Recent months have seen a surge in such incidents, including a $114 million theft from Poloniex in November, a $100 million heist involving HTX and the Heco cross-chain bridge, and a $35 million loss by Atomic wallet users in June following an iOS app update.</p>
 <p>Hackers’ continuous targeting of these platforms highlights the critical need for robust security measures in the cryptocurrency industry.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> OKX NFT marketplace overtakes OpenSea and Blur in trading volume
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/certik-urges-immediate-ios-update-for-okx-users-amidst-major-security-risk-tbt74257.html">https://thebittimes.com/certik-urges-immediate-ios-update-for-okx-users-amidst-major-security-risk-tbt74257.html</a></p>

CertiK urges immediate iOS update for OKX users amidst major security risk

Table of Contents

TheBitTimes

Other articles published on Dec 20, 2023

Bitcoin Price Prediction: BTC Dips to $42,475 Amid Big ETF Moves and Pre-Halving Mining Surge

Bitcoin (BTC) Sends 84% Addresses to Profit After Dramatic Rebound

Solana Saga called by tech-industry critic as worst smartphone of 2023

Exploring MPC Wallets: A Deep Dive into Multi-Party Computation in Cryptocurrency

Epic Games Brings Blockchain Games Back After Updating Policy

Loopring Crypto, Protocol Building Decentralized Crypto Exchanges

Join our free newsletter for daily crypto updates!