Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Web3 & Enterprise·

Jan 08, 2025

Metaplanet aims for 10K Bitcoin stockpile

Metaplanet, a Japanese Bitcoin treasury company listed on the Tokyo stock exchange, is targeting a holding of 10,000 BTC in 2025.2025 targetTaking to the X social media platform on Jan. 5, the company’s CEO, Simon Gerovich, set out a number of objectives which the company will strive to reach in 2025. Among them is the objective to expand the company’s Bitcoin holdings to 10,000 BTC. Gerovich said that the expansion of the firm’s Bitcoin holding would be achieved “by utilizing the most accretive capital market tools available to us.” He followed up on Jan. 6 with an announcement that Metaplanet has completed its 12th series stock acquisition rights. Gerovich claimed that the successful completion of the stock issuance marked “a milestone in Metaplanet’s financing and Bitcoin acquisition strategy.” The 12th series stock issuance was first announced back in November, with a six-month exercise period opening on Dec. 17. Additionally, the company issued 4.5 billion yen ($28,562,451) and 5 billion yen ($31,736,057) in ordinary bonds, with a maturity date of June 2025. Other objectives the company has set out for 2025 include enhancing transparency and shareholder engagement through new initiatives. Furthermore, Metaplanet intends to leverage its partnerships to advance Bitcoin adoption in Japan and further afield. Gerovich said that Metaplanet will explore innovative opportunities to grow the firm’s impact in Japan and within the Bitcoin ecosystem.Photo by Vasilis Chatzopoulos on Unsplash2024 ‘transformational’The Metaplanet CEO claimed that 2024 had been “transformational” for the company. He added: “We broke records, expanded our Bitcoin treasury, and reinforced our position as Asia’s leading Bitcoin Treasury Company.” Shifting its attention to 2025, the firm is focused on its efforts to drive greater value for shareholders. Metaplanet’s fortunes are now heavily dependent upon the performance of Bitcoin. In an interview at a New Year’s Eve party held in Miami by Microstrategy founder Michael Saylor, Gerovich commented on Bitcoin adoption, stating:"I’m slowly but surely seeing Bitcoin becoming a topic of discussion at the highest levels of government. Corporations around the world are beginning to adopt it as a Bitcoin standard." The Metaplanet CEO is optimistic that the U.S. will adopt a strategic Bitcoin reserve once the Trump administration commences. Should that happen, he believes that other countries will follow. He sees Japan as one of those countries where they do look to the U.S. as a guide on such matters. “So I think if President Trump does adopt it as a strategic reserve, then Japan and many countries in Asia will do the same,” he stated. Metaplanet is understood to be pursuing a business model very similar to the one pioneered by Microstrategy in the United States. The company increased the rate at which it acquired Bitcoin in H2 2024. Metaplanet made its first Bitcoin purchase in April 2024. At that time, its stock was trading at $1.90. Just as the Bitcoin unit price surged, so too did Metaplanet stock, closing the year at $22.05 per share.

news
Policy & Regulation·

Jul 14, 2023

Hong Kong’s Bricks-and-Mortar Crypto Shops Attract Chinese Visitors

Hong Kong’s Bricks-and-Mortar Crypto Shops Attract Chinese VisitorsHong Kong has become a thriving destination for cryptocurrency enthusiasts, particularly mainland Chinese visitors, due to the ambiguity surrounding the regulatory status of these crypto shops.Despite the illegality of cryptocurrency transactions on the mainland and the ban on overseas exchanges serving onshore clients, Hong Kong allows legal crypto trading, and according to a recent report published by the Financial Times, the autonomous Chinese territory is being accessed by residents of the Chinese mainland for the purpose of trading crypto.Photo by Chapman Chow on UnsplashSurging demandBricks-and-mortar crypto shops, lightly regulated and scattered across the city’s popular tourism and shopping districts, have flourished thanks to the surging demand from mainland Chinese visitors. These stores offer customers the convenience of purchasing digital assets with cash, often without the need to disclose the source of funds or personal information.In contrast to the strict licensing requirements imposed on online exchanges in Hong Kong’s push to become a virtual assets trading hub, these over-the-counter (OTC) crypto stores provide customers with the opportunity to buy large volumes of cryptocurrencies with minimal or no verification checks.Before the border between China and Hong Kong reopened fully in February, mainland Chinese customers accounted for less than 5% of customers at Crypto HK, an OTC crypto outfit with two branches in the city. However, this figure has now increased significantly, making up around half of their customer base.Similarly, One Satoshi, a crypto store with nine branches in Hong Kong, reported trading volumes between January and May 2023 that were 20–25% higher than the same period the previous year. They anticipate a 35–40% increase in trading for the entire year.While some store owners, like Roger Li of One Satoshi, currently decline mainland Chinese customers due to Beijing’s crypto ban, they remain optimistic that restrictions will ease. This belief is prevalent among the crypto community in Hong Kong following the city’s announcement to become a virtual assets hub in October.Regulatory anomalyHong Kong introduced a new regulatory framework for cryptocurrency exchanges in June, requiring all online platforms operating in the city to apply for a license. However, most OTC stores still operate outside the purview of Hong Kong’s Securities and Futures Commission (SFC), presenting an area of further consideration for the government.OTC stores primarily serve as a simple way for users to convert money to and from unlicensed online exchanges, according to Carlton Lai, head of blockchain research at Daiwa Capital Markets. Hong Kong’s lenient regulations and ease of starting such businesses, as long as there is sufficient capital, contribute to the higher number of OTC stores compared to other locations.While some shops welcome increased regulation in the sector, others do not require customers to provide identification, promoting quick and anonymous transactions. However, this falls short of the investor protection measures mandated for online platforms seeking licenses to trade cryptocurrencies to retail clients.The lack of scrutiny faced by Hong Kong’s OTC shops, coupled with their proximity to mainland China — a market that ranked fourth globally for crypto trading in 2022 — makes them appealing to Chinese citizens still interested in the asset class.

news
Web3 & Enterprise·

Dec 29, 2023

Filipino exchange Coins.ph adds BRC-20 support

Coins.ph, the leading crypto exchange in the Philippines, has announced its support for BRC-20 tokens. As part of that move, the exchange has successfully integrated the ORDI token, thereby becoming the inaugural platform in the country to embrace the BRC-20 standard. The platform clarified its support for BRC-20 in a recent blog post, which it published to its website. Coins.ph revealed its intention to expand its services further by adding support for additional BRC-20 tokens, showcasing a forward-looking approach to cater to the evolving needs of its user base. BRC-20 is a standard facilitating the creation of fungible tokens on the Bitcoin blockchain. The inclusion of this technical standard allows for the minting of tokens with unique features, introducing a new dimension to the capabilities of the world's flagship cryptocurrency.Photo by Kanchanara on UnsplashORDI memecoin additionORDI stands out as one of the most popular BRC-20 tokens, gaining traction and reaching an all-time high above $81 earlier this week. This surge in value followed the addition of trading support by crypto exchange Binance in early November, underscoring the influence of strategic partnerships and market dynamics on token performance. Wei Zhou, CEO of Coins.ph, expressed the company's commitment to staying at the forefront of digital asset innovation through this strategic move. Highlighting the remarkable growth in BRC-20 activity since its launch earlier in the year, Zhou emphasized the importance of enabling users to participate in these opportunities. He mentioned the recent listing of $ORDI and hinted at future product offerings enabled by the BRC-20 standard. Industry trendWhile coins.ph may have been the first exchange in the Philippines to introduce BRC-20 support, it's not the first mover in the broader Asian region. Back in May, leading crypto exchange OKX decided to support the BRC-20 standard through its OKX Wallet product. The company’s support of the standard was validated more recently when it emerged that BRC-20 support played a large role in OKX NFT Marketplace taking top rank as the NFT marketplace with the greatest trading volume earlier this month. Seychelles-based crypto derivatives platform Bitget has also identified the associated growth potential. Earlier this week, the platform unveiled a plan to support development within the Bitcoin ecosystem, inclusive of BRC-20. The fusion of ordinals and BRC-20 enables users to embed images, texts or audio, among other data, into satoshis—the smallest units of BTC. Bitcoin community controversyAmidst these developments, concerns have been raised by Bitcoin core developer Luke Dashjr. On Dec. 6, Dashjr disclosed that developers are working to remove Bitcoin inscriptions before the v27 update scheduled for the next year. This would imply the elimination of ordinals and BRC-20 from the Bitcoin landscape. Dashjr clarified that Bitcoin Core has allowed users to set limits on extra data size in transactions since 2013 through the "datacarriersize" setting. Despite this, inscriptions have found a way to bypass the limit by obfuscating their data as program code. He reassured the community that a recent bug in Bitcoin Knots v25.1 has been fixed, addressing concerns about vulnerability.

news
Loading