Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Policy & Regulation·

Oct 29, 2025

EU bans Ruble-backed stablecoin A7A5 in latest round of Russia sanctions

The European Council has banned all transactions within the European Union (EU) involving the Russian Ruble-backed stablecoin A7A5, according to a press release published Oct. 23. The prohibition targets the stablecoin itself, its developer, its Kyrgyzstan-based issuer, and the operator of a platform that facilitates major A7A5 trades. The package also takes aim at Russian crypto exchanges.Photo by Christian Lue on UnsplashAdditional banking restrictionsThis measure is part of a broader set of economic sanctions against sectors the EU stated assist the Russian invasion of Ukraine, including energy, finance, and defense industries. As part of this financial clampdown, the EU will also impose a ban on five additional Russian lenders starting Nov. 12. One of those lenders, Alfa-Bank, recently began offering Bitcoin buying and selling services, according to an X post by journalist Pete Rizzo. The European body said the new crypto measures address Russia’s increasing use of digital assets to circumvent existing sanctions. Russian banks were cut off from the SWIFT international payment system in early 2022, following the onset of the Russo-Ukrainian war. Reports of Russia using cryptocurrency to finance malign activities have surfaced previously. Earlier this month, Sławomir Cenckiewicz, the head of the Polish National Security Bureau (BBN), told the Financial Times that Russia has employed crypto to finance attacks on EU countries. Cenckiewicz said that a network of agents recruited by Russia’s GRU military intelligence agency and uncovered in Poland in 2023 had been substantially funded with cryptocurrency. Reflecting this concern, lawmakers in Poland’s lower house approved a bill in September to strengthen national crypto oversight, a move also expected to help curb Russian funding channels. Cenckiewicz noted that Polish intelligence agencies are closely monitoring the legislation to prevent loopholes that allow foreign actors to support agents using digital assets. Russia’s evolving crypto policyThe EU’s action comes as Russia itself is attempting to refine its own cryptocurrency rules. According to the Moscow Times, Russia's central bank wants to limit cryptocurrency use strictly to cross-border payments within an experimental legal regime (ELR). The institution continues to reject recognition of cryptocurrency as a legal means of payment and has advocated banning its use for domestic payments and retail investment, while permitting trading only for high-net-worth individuals through licensed platforms. Russia’s finance ministry has expressed a more flexible view, pointing to the scale of crypto adoption among the public. Earlier this year, the central bank estimated that domestic crypto transactions exceeded 1 trillion rubles (about $12.4 billion) per month, and that as of March, wallets linked to Russian users held roughly 827 billion rubles (about $10.2 billion). The finance ministry and the central bank have agreed to tighten supervision of the crypto market, with officials expecting to finalize the new framework before the end of the year. 

news
Policy & Regulation·

Mar 05, 2024

South Korea investigates Worldcoin for its personal data collection

On Thursday, South Korea’s Personal Information Protection Committee (PIPC) launched an investigation into Worldcoin’s personal data collection, processing and potential overseas transfer of sensitive personal data, the PIPC announced today via its official website. This comes after a number of complaints were filed against Worldcoin for its data collection practices.  Sam Altman’s crypto project Worldcoin gathers people’s personal data who signed up to have their irises scanned by “orbs” devices, which are currently installed in about 10 locations in Korea, including Yeouido, Pangyo and Apgujeong. The project started with the aim of distributing universal basic income to people whose jobs will be potentially replaced by artificial general intelligence (AGI) in the future. Photo by Colin Lloyd on UnsplashThe PIPC said the regulators will examine if any local privacy law has been violated by Worldcoin, and take further action in line with the Personal Information Protection Act. Following the launch of the investigation on Feb. 29, Worldcoin has withdrawn six orbs devices in Korea and stopped accepting new members. It has also suspended the distribution of the Worldcoin token (WLD) to members who have already signed up, media outlet Chosun Biz reported.  Free crypto tokens in exchange for personal data For individuals who have their irises scanned, Worldcoin rewards three WLD tokens every two weeks, which are worth approximately $22.5 (KRW 30,000) at the time of writing. The price of WLD has soared by nearly ten-fold from about KRW 1,300 last year to over KRW 13,000 today, according to the data from the local crypto exchange Bithumb. This price surge followed OpenAI’s launch of a text-to-video AI tool, Sora. The current circulating supply of WLD stands at around 100 million tokens. According to Worldcoin’s white paper, the WLD’s total supply cap will remain fixed at 10 billion tokens during the first 15 years following its launch.  The data collected from the eyeball scanning is shared on the Worldcoin blockchain, which is protected by the zero-knowledge proof technology that prevents the data from being tracked or shared with other applications. The personal data remaining in the orbs devices is deleted.  Ongoing overseas investigation on Worldcoin South Korea is not the only country that is examining Worldcoin’s personal data collection practices. The project’s processing of information has raised concerns in other jurisdictions as well, including the U.K., France, Argentina and Kenya. In the U.S., the issuance of WLD tokens has been banned by the country’s authority. 

news
Web3 & Enterprise·

Jan 29, 2024

Wemade ramps up excitement for upcoming games at Taipei Game Show

South Korean gaming publisher Wemade attended this year’s Taipei Game Show – the largest gaming exhibition in Taiwan – from Thursday to Sunday, where it showcased its upcoming games Night Crows and Fantastic 4 Baseball, according to news site Bridge News.Photo by Mateo on UnsplashUnveiling upcoming blockbustersAt the event, Wemade operated an exclusive booth with game demos and promotional videos. There was also a cosplay of characters from the Night Crows game and a special performance by the TSG Hawks' cheerleading team, the Wing Stars. The TSG Hawks is a professional baseball team that joined the Chinese Professional Baseball League (CPBL) last year. The Wing Stars are led by the famous Korean cheerleader Ahn Ji-hyun. In addition, Lee Jung-wook and Lee Kun-hee, the CEOs of Night Crows developer Madngine, and Fantastic 4 Baseball developer Round One Studio, took to the stage to interact directly with gamers. "Night Crows is the first MMORPG developed with Unreal Engine 5, and you can enjoy top-notch visuals with Mad Engine's unique know-how," said Lee Jung-wook. "We promise to provide new fun and stable services to our global users." "While developing Fantastic 4 Baseball, we put a lot of thought into capturing the essence of baseball and making the players' faces and batting forms look realistic," Lee Kun-hee added. "We plan to bring the game to the global market when the Taiwanese baseball league begins." Market-dominating releasesNight Crows has been popular among gamers in South Korea, where it launched in April last year, topping the popularity and revenue rankings on major app markets. The global version of the game utilizes blockchain technology to implement an advanced tokenomics ecosystem. Global pre-registration will open on Jan. 11. On the other hand, Round 1 Studio’s Fantastic 4 Baseball is a realistic baseball game where players can create their own team with famous players from various leagues, including the CPBL. The demo version includes single-player and home run derbies. Both games are slated for global release in March.

news
Loading