Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Policy & Regulation·

May 26, 2023

Silence From Multichain’s Chinese Developers Stokes Fear

Silence From Multichain’s Chinese Developers Stokes FearA prolonged silence from the project leadership behind Multichain, a cross-chain routing network, is causing growing concern among the users of the cross-chain protocol. The network currently holds $1.5 billion in total value locked (TVL).The protocol has experienced five days of stuck transactions, and multiple cross-chain bridge pathways, including Kava, zkSync, and Polygon zkEVM are still offline. Initially, the project’s China-based team attributed the issues to an upgrade that was being fixed. That explanation was changed recently to an ambiguous “force majeure,” leaving users with more questions than answers.Photo by Santiago Lacarta on UnsplashPossible arrests in ChinaAdding to the uncertainty are rumors circulating on Twitter that the core leadership team may have been arrested in China. Although the rumors remain unconfirmed, they have contributed to the growing sense of unease within the community. DJ Qian, one of the co-founders of Multichain who is no longer involved with the project, took to Twitter to share his attempts to seek clarification. Qian mentioned reaching out to Multichain CEO Zhaojun and founding partner Xu Guochang for technical assistance. When asked about Zhaojun’s availability, Qian stated that he was “not available yet.”Users and investors eagerly await updates and clarity from Multichain’s leadership team. However, the team’s lack of communication extends across various forms of social media. In group Telegram messages with the Multichain team, there have been no responses from Zhaojun, and direct messages through the same app have gone unanswered as well. This silence has left the community members puzzled, with little information to rely on.$MULTI price plummetsMeanwhile, the price of Multichain’s native token, $MULTI, has continued to decline. It currently stands at $4.37, representing a 20% decrease over the past 24 hours. The lack of communication and uncertainty surrounding the project have likely contributed to this downward trend in token price. Over the course of the past seven days, the token has decreased in price by 45%.In response to the situation, layer 1 blockchain project Conflux Network has taken precautionary measures by suspending Multichain’s co-mint privileges. This move prevents Multichain from minting tokens on the Conflux blockchain. The Conflux Network has also assured users that it will work with them in case any losses arise due to the ongoing issues.Flight to safetyOther projects and individuals have also reacted to the silence from Multichain’s team. Hong Kong-based HashKey Group, a crypto investment firm, has transferred $250,000 to crypto exchange Gate.io as a precautionary measure. Tron founder Justin Sun has withdrawn 470,000 of the $USDD stablecoin from the Multichain protocol. These actions reflect a growing concern among stakeholders, representing their efforts to mitigate potential risks associated with the uncertainty surrounding Multichain.Furthermore, the Fantom Foundation has withdrawn $2.4 million in liquidity of the protocol’s native $MULTI tokens from the decentralized exchange SushiSwap. It later tweeted out an update stating that the Fantom-Multichain bridge was operating as normal. These withdrawals signal a loss of confidence in Multichain and its native token, as stakeholders seek to protect their investments.As the silence persists, users and investors remain anxious for updates and clarifications from Multichain’s leadership team. The lack of communication and the circulating rumors have cast a shadow of uncertainty over the project, leaving stakeholders in a state of limbo.

news
Web3 & Enterprise·

Jul 07, 2023

Bakkt Signals Interest in Entering Hong Kong Market

Bakkt Signals Interest in Entering Hong Kong MarketBakkt, the US digital asset platform owned by Intercontinental Exchange, Inc., the owner of the New York Stock Exchange (NYSE), has set its sights on international expansion, with Hong Kong headlining its focus on regions that offer clearer regulatory frameworks for cryptocurrencies.Photo by Jimmy Chan on PexelsGreater regulatory clarity overseasCEO Gavin Michael highlighted Hong Kong as a target market for the company, given that the autonomous Chinese territory is making rapid progress in establishing regulatory clarity, and at a faster pace than in the United States. Alongside Hong Kong, Michael also earmarked the UK and parts of the EU as possible target markets based on similar rationale.Michael made the comments while speaking at the Piper Sandler Global Exchange & FinTech Conference in New York recently. While emphasizing the company’s commitment to the US market, Michael stated that Bakkt is actively seeking markets where it can gain traction and utilize them as a catalyst for growth. The recent acquisition of Apex Crypto, an integrated crypto-trading platform based in the US, further supports Bakkt’s international plans.Leveraging existing partnershipsMichael anticipates leveraging Apex’s existing partnerships with companies such as Webull, M1, Public.com, and Stash to facilitate expansion into international markets. Bakkt aims to accompany these companies as they venture into offering US equities trading, enabling the addition of crypto trading with minimal barriers to entry. However, regulatory concerns have led to the delisting of 25 tokens on the Bakkt platform.Michael highlighted the progress being made in crypto markets outside the US, where regulatory clarity is being achieved more rapidly. He cited the UK’s advancements in clear crypto regulation, Hong Kong’s allowance of trading certain cryptocurrencies, and the EU’s implementation of the MiCA framework for crypto regulation. While supportive of recent regulatory actions in the US, Michael believes that the country needs to provide further clarity, particularly at the federal level.The lack of regulatory clarity in the US has impacted Bakkt’s ability to collaborate with domestic companies. Despite launching with notable partnerships, including Microsoft and Starbucks, Michael revealed that many firms are awaiting clear regulatory guidelines before entering the cryptocurrency space. He noted that trading activity has been slower compared to Bakkt’s custody service, as regulatory clarity plays a significant role in shaping consumer sentiment and providing operational guidelines for trading platforms.Interest in Lightning NetworkIn addition to exploring international expansion, Bakkt is actively considering the use of the Bitcoin Layer 2 Lightning Network for custody and settlement services. Michael explained that this technology has the potential to revolutionize financial services, particularly cross-border payments.Bakkt’s strategic focus on markets with regulatory clarity and its acquisition of Apex Crypto demonstrate the company’s intent to grow beyond the US. By expanding into Hong Kong, the UK, and the EU, Bakkt aims to meet the demand of partners eager to explore these markets.However, the company recognizes the need for the US to provide clearer regulatory guidelines to foster innovation and accelerate adoption within the domestic cryptocurrency industry. With its custody services gaining traction, Bakkt is still optimistic about the potential of trading as regulatory clarity continues to improve. Moreover, Bakkt’s exploration of the Lightning Network showcases its desire to leverage emerging technologies for more efficient financial services.

news
Web3 & Enterprise·

Aug 08, 2023

Wemade Reports Loss of $30.6M Despite All-Time High Quarterly Revenue

Wemade Reports Loss of $30.6M Despite All-Time High Quarterly RevenueSouth Korean gaming company and blockchain giant Wemade disclosed its preliminary consolidated financial statements for the second quarter of this year, revealing an all-time high quarterly revenue of 159.3 billion KRW ($121 million). Despite this revenue, the company faced challenges, experiencing an operating loss of 40.3 billion KRW and ultimately recording a net loss of 29.4 billion KRW.Photo by Christian Wiediger on UnsplashNight Crows driving revenue growthThe Q2 revenue, marking a noteworthy year-on-year growth of 46%, can be attributed to the success of Wemade’s latest mobile game, Night Crows, according to local news outlet Newsis. This massively multiplayer online role-playing game (MMORPG) gained substantial traction since its launch in April. Drawing from this success, the game publisher has strategic plans to take Night Crows a step further by developing a blockchain version, with intentions to present it to global gamers within the current year.More games under developmentExpanding beyond Night Crows, Wemade is actively working on the development of other captivating gaming titles. These include Legend of Ymir, a game inspired by Norse mythology, and This Means War, a massively multiplayer online first-person shooting (MMOFPS) game.With a keen focus on blockchain ventures, Wemade is making significant strides in this domain. In May, the company forged a meaningful partnership by signing a memorandum of understanding (MOU) with Hub71, a prominent global tech hub based in the United Arab Emirates (UAE). Hub71 is undertaking initiatives aimed at nurturing Web3 startups and fostering the growth of blockchain technologies. Moreover, Henry Chang, Wemade’s CEO, attended WebX, the annual Japanese Web3 conference held in Tokyo last month, to call for game developers in Japan to participate in the burgeoning blockchain industry.Chang stated that capitalizing on its technological prowess, Wemade is actively identifying various business opportunities amid the rapid expansion of the global blockchain sector. He emphasized that the company is carefully preparing to make a seamless introduction of the blockchain version of Night Crows this year. According to Chang, Wemade is committed to investing in the creation of new games while strengthening the WEMIX ecosystem. A key element of this ecosystem is the WEMIX token, which supports three pivotal services: blockchain gaming platform WEMIX PLAY, DAO-driven NFT platform NILE, and decentralized finance service WEMIX.Fi.

news
Loading