Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Web3 & Enterprise·

Oct 28, 2023

Bitmain’s Latest Air-Cooled Antminer Set to Ship in Q1 2024

Bitmain’s Latest Air-Cooled Antminer Set to Ship in Q1 2024Bitmain, the prominent Chinese Bitcoin mining equipment manufacturer, has officially unveiled its latest innovation, the Antminer T21.Photo by Traxer on UnsplashHeat toleranceThe company confirmed in an announcement made on Thursday that the state-of-the-art air-cooled Bitcoin miner will ship during the first quarter of 2024. The Antminer T21 is expected to make waves in the world of cryptocurrency mining given that it can withstand scorching temperatures of up to 45 degrees Celsius.During a facility tour, the firm tweeted out on Friday: “Although it is so hot here, ANTMINER is still running stable!”The context of the comment relates to an installation of the new miner’s predecessor at a Moonwalk Systems facility in the arid heat of the United Arab Emirates (UAE). Moonwalk is utilizing water cooling to overcome the local conditions. However, it’s in environments like this one that Bitmain is likely to envisage its latest Antminer performing well.Energy efficiencyAnother standout feature of the Antminer T21 is its energy efficiency. With a stellar energy efficiency ratio of 19 joules per terahash (J/TH), it outpaces its predecessor, the Bitcoin Miner S21 Hyd, which offers an energy efficiency of 16.0 J/TH. This efficiency means miners can maximize their returns while minimizing their energy costs. Additionally, the Antminer T21 boasts an impressive processing power of 190 terahashes per second (TH/s), a crucial factor in the competitive world of Bitcoin mining.The compatibility of the Antminer T21 with the SHA256 mining algorithm, used in the proof-of-work (PoW) consensus mechanism for cryptocurrencies like Bitcoin, Bitcoin Cash, and Bitcoin SV (BSV), adds to its appeal.Notably, Bitmain has extended a helping hand to pre-order buyers of the Antminer T21 by offering Bitmain’s Price Protection Plan. This plan, available until November 25, aims to support miners in times of cryptocurrency market volatility. The plan shields customers from price fluctuations in Bitcoin for periods of one, three, or six months.Company difficultiesFounded in Beijing in 2013, Bitmain swiftly rose to prominence as a global leader in producing Bitcoin (BTC) mining ASICs. However, the company faced internal turmoil due to a power struggle between its co-founders, Wu Jihan and Ketuan Zhan. The situation was eventually resolved in 2021, with Jihan Wu stepping down from his roles as chairman and CEO of Bitmain and selling his ownership share to Zhan for $600 million.ASIC miner manufacturers like Bitmain have also had to grapple with the backdrop of a challenging market environment that has seen plummeting prices paid for mining equipment over the past two years.Bitmain has faced scrutiny regarding its treatment of employees. Recent reports from local sources and Bitmain employees revealed that the company issued a notification in September indicating negative operating cash flow. In response to these financial challenges, Bitmain delayed the disbursement of a portion of its employees’ September salaries, raising concerns about the financial stability of the organization. In April of this year, it emerged that the Chinese authorities had imposed a fine on the company due to tax irregularities.

news
Web3 & Enterprise·

Mar 08, 2024

SafePal invests in & partners with Switzerland’s Fiat24

Singaporean crypto wallet provider SafePal has announced a strategic investment in Swiss bank Fiat24, together with the launch of a number of financial services. The partnership is a significant milestone in bridging the gap between the crypto world and real-world financial utilities.Photo by Henrique Ferreira on UnsplashVisa card and in-app bankingThe company outlined in a blog post on March 7 that the centerpiece of this collaboration is the introduction of a crypto-focused Visa card and in-app banking services, both designed to streamline the integration of digital assets into everyday transactions. The default deposit currency for these services is the dollar-pegged stablecoin USD Coin (USDC), providing users with a stable foundation for their financial activities. Through the SafePal mobile wallet app, users can convert their cryptocurrency holdings into USDC via Ethereum layer two scaling network Arbitrum, making for an efficient and reliable process. Once converted, the USDC can be stored in multiple fiat currencies, including USD, EUR and CHF, enabling seamless utilization in various transactions and expenses. Enabling Swiss bank account accessOne of the standout aspects of this initiative is the opportunity for users to establish individually owned, fully compliant bank accounts directly within the SafePal mobile wallet app. By completing the necessary know-your-customer (KYC) and onboarding procedures through Fiat24. Opening such bank accounts will be free, with no account creation or annual management fees being applied. However, transfer and deposit fees will be applied starting from a base rate of 0.6%. The project believes that the integration of NFT technology on Arbitrum will ensure the security and transparency of all related transactions. Veronica Wong, CEO and co-founder of SafePal, emphasized the importance of addressing the accessibility challenges faced by crypto users in a communication with CoinDesk. She highlighted the significance of providing a crypto-friendly banking experience that eliminates the hurdles imposed by traditional financial institutions. Additional payment platform partnershipsIn addition to the crypto Visa cards, SafePal has forged partnerships with leading payment platforms such as Paypal, Google Pay, Apple Pay and Samsung Pay, expanding the usability and convenience of its services. While the Visa card will initially be available in select European regions, plans are underway for its gradual expansion across the continent. Similarly, the in-app banking gateway will cater to users outside the United States and in non-U.S. sanctioned countries, fostering greater accessibility on a global scale. Working towards market growth through a partnership strategy is a route that SafePal has taken in the past. In May 2023 the company attempted to make further inroads into the Korean market by partnering with South Korean enterprise blockchain project Klaytn. In that instance, the wallet provider added support for digital assets that run on the Klaytn network via its mobile app, hardware wallet and browser extension-based wallet. In light of these developments, SafePal's SFP tokens have experienced a modest increase in value. At the time of writing, the token unit price stood at $0.8026, representing a 4.62% increase over the course of the past 24 hours.  

news
Web3 & Enterprise·

Sep 30, 2023

BIS Collaborates with Singapore’s MAS, Bringing CBDC Pilot to a Close

BIS Collaborates with Singapore’s MAS, Bringing CBDC Pilot to a CloseThe Bank for International Settlements (BIS) has recently signified the culmination of Project Mariana, a pilot initiative centered on exploring the cross-border trading and settlement of wholesale central bank digital currencies (CBDCs).Photo by Pixabay on PexelsUpdating financial market infrastructureThe bank of central banks published the findings of the project on Thursday. Conceived in partnership with the Monetary Authority of Singapore (MAS) alongside the central banks of France and Switzerland, the endeavor could have profound implications for the future landscape of financial market infrastructure.Project Mariana, conducted under the patronage of the BIS, harnessed principles gathered from the emerging world of DeFi to probe the viability of employing automated market makers (AMMs) for CBDC trading and settlement.The project involved three key facets:DeFi Ingenuity: Project Mariana took inspiration and cues from the DeFi universe, particularly AAMs, to streamline foreign exchange trading and settlement. This approach was designed to bolster market efficiency while curtailing settlement risks.Cross-Border CBDC Transactions: Hypothetical wholesale versions of the Swiss franc, euro, and Singapore dollar in CBDC form were tested for cross-border trading and settlement. The central banks of France, Singapore, and Switzerland orchestrated simulated transactions via AAMs to gauge feasibility.Interoperability and Token Standards: The project showcased the practical application of a standardized technical token format offered by a public blockchain, enabling seamless interoperability across various currencies. This interoperability element played a pivotal role in facilitating cross-border CBDC transactions.While the project represents a significant move forward for the BIS in its consideration of decentralized technology, the organization is still mindful that these decentralized tools are in their infancy and in need of further scrutiny and experimentation.With that, the BIS Innovation Hub has outlined its intent to further explore the prospective advantages and obstacles associated with DeFi-infused solutions within pertinent use cases going forward.Proof of conceptWhile the BIS and participating central banks were happy with the outcome of the project, the exercise was still a proof of concept and doesn’t mean there will be any immediate adoption of CBDCs by the participating nations.Rather, it spotlights the potentials of CBDCs and DeFi in streamlining financial transactions and enhancing efficiency. Central banks can oversee wholesale CBDCs without necessarily exerting control over the underlying infrastructure, thereby furnishing commercial banks with a potent tool for instantaneous FX trading and settlement while simultaneously mitigating credit and settlement risks.The project also shone a spotlight on certain challenges, including the logistical intricacies arising from the 24/7 availability of wholesale CBDCs. Nevertheless, the manifold advantages of instant foreign exchange trading and settlement appear to outweigh these hurdles.Central bankers are likely to want a different outcome from the use of this technology by comparison with those who are currently knee-deep in building out DeFi. One commentator on X had a cynical take on the project, stating: “Intermediaries attempting to justify their existence in an age with bitcoin.”Notwithstanding that, FX is the largest financial market in the world, where $7.5 trillion in value is traded every day. To utilize DeFi technology in that context would likely be profound, regardless of the nature of the application of the technology.

news
Loading