Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Policy & Regulation·

Aug 01, 2023

Binance Expands Crypto Offering in Dubai with New License

Binance Expands Crypto Offering in Dubai with New LicenseDubai has welcomed one of the biggest players in the crypto sector, Binance, with the Virtual Asset Regulatory Authority (VARA) awarding the firm a new trading license.Photo by Petar Avramoski on UnsplashServing qualified investorsAccording to an announcement made by the company on Monday, Binance’s Dubai-based subsidiary, Binance FZE, has secured the operational Minimum Viable Product (MVP) license from VARA.Eligible investors in Dubai, deemed as “qualified retail clients,” will now have access to authorized services such as compliant crypto-to-fiat exchanges, adhering to the guidelines set by the Financial Action Task Force (FATF). To qualify, investors must meet specific criteria, including being at least 21 years old and possessing a minimum of 500,000 United Arab Emirates dirhams ($136,000) in net liquid assets, supported by relevant documentary proof like bank statements and proof of funds.Additionally, qualified investors are required to provide valid identification documents, including passports and visas, along with proof of a valid UAE address and contact details. This comprehensive verification process ensures compliance with regulatory requirements and enhances security measures for all parties involved.Expanded service offeringThe move is a significant development as it allows Binance to offer cryptocurrency exchange and virtual asset broker-dealer services to institutional and qualified retail investors in Dubai.With the new license, Binance’s Dubai entity can now offer crypto-to-fiat exchange, conversions, transfer and custody solutions, brokerage facilities, as well as virtual asset payments and remittance services. The development builds upon Binance’s previous progress, having received the provisional MVP license in March 2022, followed by the preparatory MVP license in September 2022.Licensing challengesIt’s worth noting that some crypto exchanges have faced challenges operating with preparatory MVP licenses due to limited capabilities, only serving a restricted set of accredited investors. Bybit CEO Ben Zhou had previously highlighted this concern. That said, Zhou still came to the conclusion recently that the regulatory approach in the UAE is superior by comparison with many other jurisdictions.The news of Binance’s successful licensing comes shortly after VARA suspended the operational license of another crypto exchange, BitOasis, for not meeting required conditions within the set timeframes. BitOasis assured its commitment to fulfilling the remaining conditions in collaboration with VARA.In April 2023, VARA sought additional information from Binance, aiming to tighten regulatory standards in the emirate. Binance promptly provided all requested information and looked forward to further collaboration with VARA as it prepared for the next phase of licensing.Compliance with VARA’s framework includes adherence to compulsory rulebooks related to general operations, compliance, and market conduct requirements. The regulator has published key highlights of the regulations in 2023, underscoring its efforts to create a robust and well-regulated crypto market in Dubai.Regulatory headwindsBinance’s latest regulatory achievement indicates the exchange’s dedication to expanding its services and offerings in the region. It could potentially lead to something even more significant for the company in the Middle East as Binance has suggested that it would be more likely to expand in places such as Dubai, given an adverse regulatory approach elsewhere.Over the course of the past three months, the company has been forced out of key markets such as Germany, Canada, Belgium, the Netherlands, and Cyprus, due to regulatory pushback.

news
Policy & Regulation·

Apr 24, 2025

Symbiotic raises $29M in funding amid moves to expand

Symbiotic, a shared security protocol project that seeks to create a marketplace for blockchain network economic security, has raised $29 million in a Series A funding round.The funding round related to the Dubai-headquartered project was led by American venture capital and hedge fund firm Pantera Capital. Other funding round participants included Coinbase Ventures and a long list of angel investors, including Aave CEO Stani Kulechov, 1inch co-founder Anton Bukov, Conduit founder Andrew Huang and Polygon co-founder Sandeep Nailwal.Photo by Markus Winkler on UnsplashBuilding out ‘universal staking’Announcing the Series A funding on social media, the project stated that it is building “universal staking” and with that, transforming “how blockchains implement security and economic alignment.”Symbiotic started out as an Ethereum-centric restaking project. It announced last August that its staking infrastructure had been deployed across 14 blockchain networks. Symbiotic co-founder Misha Putiatin told Blockworks that in now working towards building out a universal staking framework, it's going to double the number of supported blockchain networks. He stated: “This isn’t a pivot, it’s an expansion — a natural progression of the vision we started with.” In a press release publicizing the funding round, Pantera Capital Managing Partner Paul Veradittakit described universal staking as “the next step in blockchain infrastructure.” Describing Symbiotic’s business proposition, he said that the firm “unlocks economic coordination between assets and networks that were previously impossible,” allowing these assets “to easily serve as economic security while enabling entirely new use cases across DeFi.” Team & product expansionThe funding will also be used to expand the project’s current team. It will also expand its product offering beyond restaking, putting support in place for other staking activities. Symbiotic stated that beyond blockchain network security, the protocol supports other use cases, including insurance and other financial products.Putiatin told CoinDesk that the company is building infrastructure, and that its task going forward “is to improve on that by a huge margin.” The Symbiotic co-founder added that the company is catering to the needs of market participants who don’t want to share their security. He added: “They want to build their own security vertical and their own alignment, just using us.” Symbiotic emerged in June 2024 with backing from Konstantin Lomashuk and Vasiliy Shapovalov, co-founders of the Lido liquid staking protocol. At that time, the project attracted $5.8 million in seed funding, with the funding round having been led by crypto investment firm Paradigm and tech-oriented investment company cyber•Fund. It initially introduced a devnet on the Ethereum Holesky testnet. Following a considerable period of development, the project eventually launched on the Ethereum mainnet in January. The same month, the firm added customizable slashing capabilities to its restaking system. Slashing refers to a penalty system imposed on validators of proof-of-stake (PoS)-based networks.Symbiotic was introduced to the market as an alternative to EigenLayer, the restaking protocol with the largest share of total value locked (TVL). It differs from the market leader insofar as Symbiotic’s users can deposit any ERC-20 token into the protocol, whereas EigenLayer only facilitates ETH.

news
Web3 & Enterprise·

May 26, 2023

Renault Korea Establishes Metaverse Space for Car Enthusiasts

Renault Korea Establishes Metaverse Space for Car EnthusiastsRenault Korea Motors made an announcement on Friday that it will establish the Renault Korea Hub, an immersive automotive experience located within a metaverse, according to a report by Korean news media Dailian. The company intends to commence operations of this unique venture in the upcoming autumn season.Photo by Richard Horvath on UnsplashThe Sandbox and Korean brandsThe Renault Korea Hub will operate within K-verse, a designated area of Korean brands within The Sandbox, a metaverse platform based on blockchain technology.The Sandbox metaverse has recently announced its latest Korean brand partners, and as part of this development, a land sale event is being organized where their adjacent land will be raffled off. The event is named “Hallyu Rising.” Hallyu or the Korean Wave is a cultural phenomenon that has experienced a significant surge in global popularity since the 1990s, mainly thanks to its pop songs and TV shows.During the land sale event, users have the chance to acquire land adjacent to various prominent brands associated with Korean culture. This will be made possible through raffles and auctions facilitated by the metaverse platform. Other notable partners besides Renault Korea are Channel A, a TV broadcasting network; Netmarble, a game publisher; and CJ ENM, an entertainment company.Unique experiences for car enthusiastsThe Renault Korea Hub, the first of its kind in Korea, will provide a unique space for automobile enthusiasts to indulge in a diverse array of experiences and games. As per the automaker’s announcement, visitors will have the chance to engage in activities like developing their own vehicle designs.Visitors will have the opportunity to experience Renault Korea’s vehicles in voxel form, allowing them to explore the technology, design philosophy, and stories associated with each vehicle. A voxel can be understood as a 3D counterpart to a 2D pixel, representing a value on a regular grid in 3D space.Renault Korea CEO Stéphane Deblaise stated that the carmaker intends to continue its pursuit of diverse Web 3.0-based activities centered around metaverses and non-fungible tokens (NFTs). He said the automaker’s projects aim to establish a connection between customers’ mobility experiences and their digital lives. Deblaise also highlighted that these projects will undergo further development through the integration of artificial intelligence (AI) technologies.Storytelling contestEarlier this month, Renault Korea introduced the storytelling contest titled “create your SM6,” which concludes today. This campaign inspires customers to utilize emerging AI technologies to design their own SM6 vehicles and transform them into NFTs. The SM6, Renault Korea’s midsize sedan, initially debuted in 2016 and has undergone subsequent facelifts to enhance its features and aesthetics.The top ten performers in the storytelling contest, who create captivating renditions and stories featuring the SM6, will be rewarded with utility NFTs and KLAY, the native token of the Klaytn network. The first-place winner will receive a prize package consisting of 1 million KRW ($750) worth of KLAY, along with six SM6 NFTs.The announcement of the winners is scheduled to take place between May 31 and June 9. Following the announcement, the airdrop of rewards will be conducted from June 30 to July 7.

news
Loading