Cryptocurrency

2024

Security

<p>The post <a href="https://coinpedia.org/news/okx-takes-action-after-multi-million-dollar-security-breach/" rel="noopener noreferrer nofollow">OKX Takes Action After Multi-Million Dollar Security Breach</a> appeared first on <a href="https://coinpedia.org" rel="noopener noreferrer nofollow">Coinpedia Fintech News</a></p>
<p>Cryptocurrency exchange OKX, with the help of its security partner SlowMist, is studying a large-scale security incident in which unauthorised persons stole two users’ accounts through an SMS attack or phishing on June 9.&nbsp;</p>
<p>Initially discovered by the SlowMist founder, the leak entailed generating a new API key with the privileges of taking and trading. However, the amount that was embezzled is thought to be in the millions.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="zh" dir="ltr">两个不同的受害者，今天凌晨遭遇的交易所账号被盗币事件的手法及一些特征居然是相似的，除了 <a href="https://twitter.com/AsAnEgg?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@AsAnEgg</a> 提到的共性，还包括短信风险通知来自“香港”这个特征、创建了新的 API Key（有提现、交易权限，这也是为什么之前怀疑有对敲意图，目前看来可以排除了）。… <a href="https://t.co/pqIjqLhmkB" rel="noopener noreferrer nofollow">https://t.co/pqIjqLhmkB</a></p>— Cos(余弦) <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f636-200d-1f32b-fe0f.png" alt="😶‍🌫️" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@evilcos) <a href="https://twitter.com/evilcos/status/1799677006097027397?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 9, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>Still, SlowMist and other analysts stated earlier that OKX’s two-factor authentication (2FA) was not the primary weakness. A Web3 security group Dilation Effect disassembling the attack found that hackers used the lower-security verification routine to whitelist withdrawal addresses via an SMS option.</p>
<h2 class="wp-block-heading" id="h-okx-founder-addresses-recent-million-dollar-breach"><strong>OKX Founder Addresses Recent Million-Dollar Breach</strong></h2>
<p>OKX founder has recently addressed the crypto community concerning the recent security breaches, stating that all incidents have been fixed. He noted that the incidents were not connected with the Google Authenticator or SMS verification option, though OKX advises using Google Authenticator for increased security.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="zh" dir="ltr">关于近期个别客户账户出现安全事件的情况说明 <br><br>1. 所有此事件的有关用户都已经/马上得到圆满解决； <br>2. 此事件与谷歌验证器或短信验证的选择无关，但是 <a href="https://twitter.com/hashtag/OKX?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#OKX</a> 确实推荐有能力的用户使用谷歌验证器； <br>3.…</p>— OKX中文 (@okxchinese) <a href="https://twitter.com/okxchinese/status/1800794494016930119?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 12, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The security system has been working on the platform for more than 10 years and is still reliable, and OKX still compensates customers for losses caused by the company’s security failures.&nbsp;</p>
<p>One of the major components of the breach was fake judicial documents being used to obtain information on a few customers. OKX handles the judicial cooperation issue well, a verification mechanism has been put in place, and AI face recognition security has improved.&nbsp;</p>
<p>New mechanisms are also to be incorporated regarding the expiration of authentication addresses to avoid such occurrences. After these strategies had been implemented, there was no record of other users losing their accounts to theft or the leakage of their information.&nbsp;</p>
<p>The company is improving its protection infrastructure, for instance, by improving advanced face recognition methods and AI and other better verification systems. To unlock the loss, OKX assured users that their funds were safe and affirmed the company’s commitment to avoiding such calamities in the future to retain customers in the unpredictability of the cryptocurrency market.</p>

OKX Takes Action After Multi-Million Dollar Security Breach

Table of Contents

CoinPedia News

Other articles published on Jun 12, 2024

Shiba Inu Exec Warns Bearish Outcome As Apple Exits X Amid Elon Musk’s Heat

Why MoonBag’s 2024 Presale is Hot: $1 Prediction After Burns And Coinbase Listing Rumors Attract ...

Get Ready for BitDelta's $50,000 Trade-a-Thon Extravaganza

As Bitcoin aims for 100K, what about the ‘mega altseason’ hype?

How to generate passive crypto income with masternodes

KuCard: Kucoin and Wallester Combine to Create Leading Card Solution in Crypto-Fiat Integration

Join our free newsletter for daily crypto updates!