Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Policy & Regulation·

Jul 31, 2023

Busan City Houses Two Foreign Financial Firms on the Road to Becoming Blockchain, Fintech Hub

Busan City Houses Two Foreign Financial Firms on the Road to Becoming Blockchain, Fintech HubThe city of Busan said Monday that it has chosen two financial companies, UIB Korea and Lina One, as the new occupants of Decacorn-Space — an office space on the 63rd floor of the Busan International Finance Center (BIFC) — in an effort to position the southern port as the nation’s blockchain and fintech hub.Busan has been running an open call for foreign financial institutions to move into the recently renovated space since June. After a rigorous two-step evaluation process, UIB Korea and Lina One were selected, the city said.This comes as part of Busan’s efforts to further develop the BIFC and become a major financial powerhouse in Korea.“We have been relocating public financial institutions, fostering financial experts, and exploring new growth drivers such as fintech, blockchain, and digital innovation,” the city’s mayor Park Heong-joon explained.Photo by Minku Kang on UnsplashAbout UIB Korea and Lina OneUIB Korea, or UIB Insurance Brokers, is the Korean branch of UK-based UIB Group — a global insurance broker that offers risk management advisory services. In particular, the firm is set to work with other domestic companies such as DB Insurance and Meritz Fire & Marine Insurance to establish a consortium for providing insurance products and consulting services.Meanwhile, Lina One is the Korean branch of Chubb Group, the world’s largest publicly traded property and casualty insurance company. One of the firm’s major goals is to promote the insurance information technology market in Busan.Notably, both companies aim to leverage their digital capabilities, experience, and competitiveness to achieve similar goals, which include digitizing insurance for various partners, ranging from maritime and industrial companies to regional banks, fintech companies, and individuals. In turn, their efforts are expected to expand Busan’s network with the larger global financial community and present the city as an ideal spot for international conferences.On the road to becoming a financial hubDespite considerable challenges such as the withdrawal of foreign financial institutions from Korea and the impact of COVID-19 on international travel, the city has continuously made efforts in collaboration with the Busan Finance Center to attract international financial institutions through events like investor relations meetings and local networking activities.To support the successful landing of these companies in Busan, the city will also offer one-stop services such as business model development support and residential settlement consultations.Once settled, UIB Korea and Lina One are expected to generate significant synergy with partner firms such as local financial holding company BNK Financial Group during the third phase of the development of the BIFC whose objective is to house innovative financial workspace by 2025.“It is crucial for us to attract more competent domestic and foreign financial institutions that will have a great impact on the city’s financial economy,” Mayor Park emphasized.

news
Web3 & Enterprise·

Oct 04, 2024

HashPalette acquisition sees Aptos Labs enter Japanese market

Aptos Labs, the developers behind the Aptos layer-1 blockchain, has entered the Japanese market through the acquisition of HashPalette, a blockchain network concerned with the issuance, management and distribution of non-fungible tokens (NFTs). HashPalette informed stakeholders of the development on Oct. through an X post, alongside a press release published on its behalf by Japanese public relations company PR Times. Photo by Tianshu Liu on UnsplashExpanding Asian presenceUp until now, HashPalette has been a wholly owned subsidiary of HashPort, a blockchain-related consulting and infrastructure provider based in Tokyo. This acquisition sees the project transfer to being a wholly owned subsidiary of Aptos Labs. Accordingly, this will mean that applications developed by HashPalette will be migrated onto the Aptos Network. Similarly, the Palette Chain blockchain will migrate over to Aptos. From Aptos Labs’ perspective, the acquisition enables it to expand its blockchain ecosystem in Japan and within Asia more broadly. Aptos Labs Co-Founder Mo Shaikh described the acquisition as an investment in “the talented builders and creators of the region.”  Deal pending approvals, closing conditionsWhile the parties have announced the acquisition, the deal is still subject to required approvals being granted, together with various closing conditions related to the sale being met. Addressing the need to close out the deal, HashPalette tweeted:“HashPort and Aptos Labs will work closely together in the transition and will take great care to ensure that all stakeholders, including PLT and ELF holders, are not disadvantaged by the migration.” The PLT token is HashPalette’s native token. According to the project’s whitepaper, it has utility when it comes to the payment of NFT issuance fees and node management fees relative to the Palette Chain. Additionally, it can be used to pay for NFTs issued on the Palette Chain and for subscription payments related to applications developed on top of the network. The ELF token is a crypto asset utilized within THE LAND ELF Crossing, an NFT farming game which was developed by HashPalette and issued on the Palette Chain. The game is being marketed in Japan with the assistance of Animoca Brands following a partnership earlier this year. The companies have agreed to gradually migrate NFTs which had been issued on Palette Chain, relative to the EXPO2025 digital wallet developed by HashPort, to the Aptos Network. Once that migration has been achieved, it’s envisaged that the Aptos Network will become the only blockchain associated with the EXPO2025 digital wallet. Unresolved Palette Chain issuesFrom the point of view of the development team behind HashPalette, it was outlined in the press release that the move goes beyond a simple financial transaction. It acknowledged that “Palette Chain still has many issues.”  Against that background, the team believes that in order to further accelerate the social implementation of Web3, it has “considered how to make services built on Palette Chain more scalable and usable, and to enable smoother access to the global Web3 market.” That consideration has brought the project team to the conclusion that migrating to the Aptos Network offers the best path forward. At the time of writing, Aptos’ APT token was trading at $8.93, up 12.44% over the course of 24 hours, according to CoinMarketCap data.

news
Policy & Regulation·

Dec 20, 2023

Crypto emerges as topic in Indonesian election campaign

Crypto emerges as topic in Indonesian election campaignAs Indonesia gears up for its upcoming presidential election, the country’s crypto market has become a focal point for political discourse. Gibran Rakabuming Raka, a vice presidential candidate and the eldest son of President Joko Widodo, recently unveiled his plans to foster expertise in blockchain and crypto within the Southeast Asian nation.Chosen as the running mate for presidential candidate Prabowo Subianto, the 36-year-old politician aims to elevate tech education in Indonesia, opening avenues for the younger generation, particularly in the realm of digital assets. According to a report by Indonesian online news portal detikNews, while speaking at a political gathering on Dec. 10, Gibran asserted:“We are preparing blockchain experts, we are preparing cyber security experts, we are preparing crypto experts.”Photo by Nick Agus Arya on UnsplashCrypto potentialIndonesia has emerged as being ahead of the curve in terms of crypto adoption, ranking seventh on Chainalysis’ 2023 global crypto adoption index. With an estimated 18 million crypto investors, the country boasts a robust industry association that also functions as a self-regulatory body.Local news media reported in October that the Southeast Asian country has seen a 10.1% year-on-year increase in the number of crypto investors. At the time, Tirta Karma Senjaya, Head of the Commodity Futures Trading Regulatory Agency, said, "Growth in the number of crypto investors in Indonesia continues to increase, but investors are still looking for the right time to buy crypto.”Private sector entities have also identified the raw potential. In the same month, Web3 consulting firm Tiger Research, in partnership with South Korean crypto data platform Xangle, produced a report which identified significant potential for the development of Indonesia’s Web3 market. There are over 30 crypto exchanges operating in the country, acting as the primary channel through which growth in crypto is propelled in Indonesia.Capitalizing on crypto interestThe government, under President Widodo, has actively sought to capitalize on this crypto enthusiasm, going as far as establishing a local “stock market” dedicated to crypto assets.Gibran’s proactive stance on crypto education aligns with his broader vision of positioning Indonesia at the forefront of the global digital revolution. The country’s rapidly growing tech landscape and crypto adoption make it an opportune space for fostering expertise in these cutting-edge technologies.As the presidential election approaches, Gibran’s commitment to cultivating a pool of crypto experts underscores the potential influence of the crypto industry in shaping Indonesia’s economic future.An international topicCrypto is increasingly becoming an important topic in elections globally. In the United States, many of the presidential candidates, particularly within the Republican Party, have publicly expressed their interest in crypto and blockchain. Yesterday, Ripple CEO Brad Garlinghouse took to the X social media platform on the subject, stating:”Team @Ripple is putting a stake in the ground, leading the charge with other industry leaders to support pro-innovation and pro-crypto candidates in the 2024 US election cycle. The US cannot afford to continue taking a back seat on the global stage.“With Indonesia’s election frontrunners, Prabowo and Gibran, expressing interest in the sector, it remains to be seen how this focus on crypto will resonate in the upcoming political debate on Feb. 4.

news
Loading