<div class="wp-block-group has-background is-vertical is-layout-flex wp-container-core-group-is-layout-8cf370e7 wp-block-group-is-layout-flex" style="background-color:#abb7c226;font-style:normal;font-weight:200">
 <p><strong>Key Highlights</strong></p>
 <ul>
  <li>An OKX user claims 50 ETH was stolen despite never exposing his private key.</li>
  <li>SlowMist reportedly confirmed a private-key leak, fueling questions about OKX’s internal security.</li>
  <li>The user demands transparency on audits, past incidents, and potential insider abuse, calling it an industry-wide trust crisis.</li>
 </ul>
</div>
<p>OKX is facing one of its most serious public security controversies after a longtime user claimed that nearly 50 Ethereum (ETH) was drained from his OKX Wallet, despite saying he never exposed or copied the private key. Subsequently, CEO Star Xu announced a reward of 10 Bitcoin (BTC) to individuals who could provide conclusive evidence that OKX Wallet contains a backdoor.</p>
<p>The response came after the user’s allegation sparked widespread speculation about a potential “backdoor” in the wallet software. In <a href="https://x.com/star_okx/status/1989642944736006573?s=20" target="_blank" rel="noopener noreferrer nofollow">a reply</a> to X post by another user, Xu wrote:</p>
<p>“Anyone who can provide conclusive evidence that OKX Wallet contains a backdoor will receive 10 BTC.” The reward, worth roughly $1 million, is one of the largest security bounties ever offered by a major crypto company.</p>
<h2 class="wp-block-heading" id="a-theft-claim-ignites-fears">A theft claim ignites fears</h2>
<p>The controversy began when an influential Chinese community member, known as 6哥, posted that his four-year-old OKX Wallet was drained of almost 50 ETH. He insisted that his private key had never been saved digitally, photographed, uploaded, or shared.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>我的50 ETH被盗<br><br>我不知道该怎么开始。<br>在1011事件之后，我已经被摧毁一次。<br>但这几天，我又被打倒了第二次。<br><br>我的 OKX Wallet，被盗走了 将近50 ETH。<br>那是一个我刚入圈时建立的老钱包，<br>私钥与注记词全是手抄，从未上传、从未截图，也从未给任何人看过。<br><br>我不敢说我多懂技术，但我敢保证… <a href="https://t.co/8n9TA1zWAj" rel="noopener noreferrer nofollow">https://t.co/8n9TA1zWAj</a></p>— 6哥 ⁶⁶⁶ (@ChinaWhaleETH) <a href="https://twitter.com/ChinaWhaleETH/status/1988853099482738753?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">November 13, 2025</a>
  </blockquote>
 </div>
</figure>
<p>Several users echoed similar concerns, citing past incidents and demanding transparency. Within hours, the discussion dominated Asian crypto channels.</p>
<p>OKX denied any wallet backdoor and said its review showed the private key had been imported via copy-paste, a common leak point. The exchange urged the user to check every device or storage location and made itself available.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>您好，与您沟通，我们对您提供的日志进行了初步排查，发现您的私钥是通过复制/粘贴方式导入的。所以也辛苦您仔细回忆一下：私钥或助记词曾经在哪些地方存储或复制过。任何可能的存储位置或操作环节都可能是泄漏的来源。…</p>— OKX中文客服 (@OKXHelpDesk_cn) <a href="https://twitter.com/OKXHelpDesk_cn/status/1988994491676754270?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">November 13, 2025</a>
  </blockquote>
 </div>
</figure>
<h2 class="wp-block-heading" id="okx-escalates-prove-it-and-we-pay-10-btc">OKX escalates: “Prove it, and we pay 10 BTC”</h2>
<p>As speculation grew, OKX CEO Star Xu issued a high-stakes challenge:</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>任何人只要能够提供确凿证据，证明 OKX Wallet 存在后门，我们的 <a href="https://twitter.com/wallet?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@wallet</a> 团队将奖励 10 BTC。请OKX Wallet全球几千万用户共同监督。安全透明是底线，欢迎社区审查。 <a href="https://t.co/yVtz4Mpa1f" rel="noopener noreferrer nofollow">https://t.co/yVtz4Mpa1f</a></p>— Star (@star_okx) <a href="https://twitter.com/star_okx/status/1989642944736006573?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">November 15, 2025</a>
  </blockquote>
 </div>
</figure>
<p>He also encouraged OKX’s “tens of millions of users” worldwide to monitor the situation, signaling that the company is confident no backdoor exists. The move is an attempt to regain narrative control, turning a defensive posture into a public bet on the wallet’s integrity.</p>
<h2 class="wp-block-heading" id="the-accusation-grows">The accusation grows</h2>
<p>The victim pushed back, saying SlowMist confirmed the incident was caused by a private-key leak, not phishing, copied keys, screenshots, or user mistakes.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>我的 OKX 钱包在无任何私钥泄漏的情况下被盗走 50 ETH。<br><br>私钥是4年前手抄保存、没有被黏贴版狭持，慢雾团队 <a href="https://twitter.com/evilcos?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@evilcos</a> 已经证实是私钥外泄导致，不是钓鱼网站跟授权问题。<br><br>这意味着问题可能出在 OKX 热钱包系统本身。<br><br>我不是第一个受害者。2024 年 3 月就有一批用户资产被盗… <a href="https://t.co/zM0lIeJjkU" rel="noopener noreferrer nofollow">https://t.co/zM0lIeJjkU</a></p>— 6哥 ⁶⁶⁶ (@ChinaWhaleETH) <a href="https://twitter.com/ChinaWhaleETH/status/1988963448328421424?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">November 13, 2025</a>
  </blockquote>
 </div>
</figure>
<p>He then pressed OKX for answers: Where is the latest security audit? Could an employee have abused internal access? And why were similar thefts from March 2024 never disclosed? Calling the case “a collapse of trust for the entire crypto industry,” he vowed to publish more evidence until OKX provides a full explanation.</p>
<h2 class="wp-block-heading" id="security-stakes-rise-as-okx-pushes-into-u-s-defi">Security stakes rise as OKX pushes into U.S. DeFi</h2>
<p>Just this week, OKX <a href="https://www.cryptotimes.io/2025/11/14/okx-launches-decentralized-trading-for-u-s-customers/" target="_blank" rel="noopener noreferrer nofollow">launched decentralized trading</a> for U.S. users, giving Americans access to tokens across Solana, Base, and its own X Layer network, while promoting self-custody features as a core advantage.</p>
<p>This upgrade followed a $505 million DOJ settlement, making security scrutiny even more acute. As DEX volumes surge, OKX is pushing hard into CeDeFi — but even a hint of a hidden wallet flaw threatens to undercut that entire effort.</p>
<h2 class="wp-block-heading" id="what-comes-next">What comes next</h2>
<p>The community is now watching three fronts: OKX’s promised forensic report, SlowMist’s confirmation of a key leak, and the open 10 BTC bounty that has researchers probing the wallet code for anything resembling a backdoor.</p>
<p>Whether the breach stems from user error, device compromise, malware, or something deeper remains unresolved. What is clear is that OKX’s reputation, and broader confidence in self-custody wallets, is being stress-tested in real time.</p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Also read: <a href="https://www.cryptotimes.io/2025/11/15/u-s-launches-strike-force-to-battle-9b-crypto-scams/" target="_blank" rel="noopener noreferrer nofollow">U.S. Launches Strike Force to Battle $9B Crypto Scams</a></p>
</blockquote>

$1M OKX Challenge: Prove Wallet Backdoor, Win 10 BTC

Table of Contents

The Crypto Times

Other articles published on Nov 15, 2025

Join our free newsletter for daily crypto updates!