Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Web3 & Enterprise·

Oct 05, 2023

Ripple Expands in Asia-Pacific with Full License to Operate in Singapore

Ripple Expands in Asia-Pacific with Full License to Operate in SingaporeEnterprise blockchain firm Ripple announced on Wednesday (UTC) that it has secured a full license to operate in Singapore, where it has established its Asia-Pacific headquarters since 2017.Photo by Sergio Sala on UnsplashFrom outline to full approval in 4 monthsThis development marks another step in Ripple’s strategic expansion within the Asia-Pacific region, known for its rapidly growing cryptocurrency market. Ripple’s journey to obtaining this full license began less than four months ago when the Monetary Authority of Singapore (MAS) granted it an initial in-principle approval in June. With the newly acquired full license, Ripple is now authorized to offer regulated cryptocurrency payment services in Singapore, a key financial hub in the region.Brad Garlinghouse, the CEO of Ripple, expressed his enthusiasm for the company’s continued growth in Singapore, stating:“We have hired exceptional talent and local leadership, doubling headcount over the past year and plan to continue growing our presence in a progressive jurisdiction like Singapore.”Global expansion strategyThe company also highlighted the fact that over 90% of Ripple’s business occurs outside the United States, making the Asia-Pacific region, and Singapore in particular, a vital part of its global expansion strategy.Monica Long, President of Ripple, explained in a recent interview with CNBC that the Singapore office has seen substantial growth in the past year due to the booming business opportunities in the Asia-Pacific region. This expansion aligns with Singapore’s leadership in crypto regulation in the region. The introduction of the Payment Services Act, which has been in effect since January 2020, has played a large part in that, regulating payment services and crypto services to the public.Singapore’s regulatory framework also includes requirements for crypto service providers to safeguard customer assets in statutory trusts by the end of 2023 and restrictions on facilitating lending or staking of retail customers’ assets. These measures ensure consumer protection and responsible growth in the crypto industry.Praising SingaporeGarlinghouse commended Singapore’s regulatory approach, stating, “Under MAS’ leadership, Singapore has developed into one of the leading fintech and digital asset hubs, striking the balance between innovation, consumer protection and responsible growth.” Ripple’s experience in Singapore differs entirely from the ongoing legal battle it has found itself in in the United States with the Securities and Exchange Commission (SEC).Both Ripple and Coinbase have found themselves embroiled in lawsuits with the regulator in the US. In Ripple’s case, the firm and its founders have been accused of unlawfully selling their native cryptocurrency XRP without registering it with the SEC. However, a landmark ruling in July determined that XRP, as a token, may not necessarily be classified as a security.Long spoke to the contrasting experiences the firm has encountered between the United States and Singapore. Long stated:”Being in Singapore a couple weeks ago felt like night and day compared to the US in terms of open dialogue with regulators, and thus being able to build innovative *and* compliant products.”Ripple, along with Coinbase and several other crypto firms, has criticized the lack of regulatory clarity in the US and has even considered relocating operations due to the SEC’s stringent regulatory stance. Notably, Coinbase also recently announced its successful acquisition of a major payment institution license in Singapore, following its in-principle approval obtained about a year ago.

news
Web3 & Enterprise·

Nov 16, 2023

Circle introduces Circle Mint with zero-fee USDC minting

Circle introduces Circle Mint with zero-fee USDC mintingIn a move designed to enhance accessibility and compliance, Circle, the issuer of leading U.S. dollar stablecoin USDC, has introduced the “Circle Mint” facility.Singapore launchIn a recently published blog article on its website, the company outlined that the zero-fee minting service is set to launch initially in Singapore. In June, Circle Internet Singapore, the company’s Singapore-incorporated subsidiary, secured a Major Payments Institution (MPI) license from the Monetary Authority of Singapore (MAS). In this most recent announcement, the firm indicated that given the MPI licensing award, it was most appropriate to launch the service initially in Singapore.Circle executives, alongside its co-founder and CEO Jeremy Allaire, were attendees at the Singapore Fintech Festival on Wednesday, an annually organized knowledge platform for the global fintech community. Taking to the X platform, Allaire stated:“It was an honor to host [Singapore President, Tharman Shanmugaratnam] with the @circle team at @sgfintechfest where we officially launched Circle Mint Singapore.”Photo by Mike Enerio on UnsplashCircle Mint facilityCircle Mint Singapore will attempt to strategically position itself as a trusted gateway to the world of digital currencies, emphasizing compliance with MAS regulations. For Singapore-registered entities, the facility offers a range of benefits.Rather than a traditional bank account, Circle Mint is a digital wallet that enables users to send, receive and store digital assets. There will be no minting fees as part of the offering. Customers will be able to take advantage of a zero-fee product offering for both the minting and redemption of USDC. The move eliminates additional risks and additional fees, as well as the ability to do away with the lengthy transaction times often associated with brokers and resellers.Circle Mint Singapore has been designed to align seamlessly with MAS regulations. In that way, the company can reassure its customer base that financial activities are conducted efficiently, securely and compliantly within the regulatory framework.Instant availabilityInstant availability is another feature that Circle is enabling through its Circle Mint product offering. Fiat funds from users’ bank accounts can be swiftly and automatically converted to USDC. That’s thanks to the instant settlement networks of participating banks. Circle Mint Singapore is also planning to expand access to regional banking rails for near-instant settlement, streamlining transactions for users.As digital currency adoption gains momentum in the Asia Pacific (APAC) region, Circle Mint Singapore’s initiatives have the potential to play a pivotal role in making digital currencies more accessible for businesses in this dynamic market.Asian market emphasisIn addition to this latest product offering, other recent activities of the global financial technology firm in recent weeks suggest that it has placed a strong emphasis on market growth in the APAC region.In September, the firm partnered with Southeast Asian super-app Grab. As part of that collaboration, Circle’s Web3 services platform is being integrated into the app to facilitate blockchain-enabled solutions. The move will see Grab’s 25 million users exposed to the facility of a digital wallet within the app.Similarly, the following month, Circle followed up with a deal with Taiwan FamilyMart, a convenience store chain, and the BitoPro cryptocurrency exchange. Once again, Circle’s Web3 services platform is being integrated, this time into the FamilyMart app, so as to enable the redemption of loyalty points in USDC.

news
Web3 & Enterprise·

Oct 06, 2023

CoinDCX Expands Okto Wallet’s Global Reach with Transak Integration

CoinDCX Expands Okto Wallet’s Global Reach with Transak IntegrationIndian cryptocurrency exchange CoinDCX has moved to broaden the accessibility of its self-custody wallet, Okto. The exchange recently announced the addition of Transak, a major on-ramp platform that enables a fiat-to-crypto payment gateway integration, to enhance the wallet’s global capabilities.Photo by Kanchanara on UnsplashBuilding on OktoThat’s according to a report published by Cointelegraph on Thursday. Okto was introduced by CoinDCX in August 2022, and the firm swiftly moved to expand its services. The integration with Transak represents a pivotal step in this direction.This strategic integration immediately expands the reach of the Okto wallet from supporting 60 countries to an impressive 155 jurisdictions. Neeraj Khandelwal, Co-Founder of both CoinDCX and Okto, emphasized the significance of this move, stating that it allows users in numerous countries to engage with cryptocurrencies directly through Okto.While Transak supports approximately 160 tokens, Okto goes above and beyond by allowing users to store more than 1,000 tokens across multiple blockchain networks, including Polygon, Fantom, Avalanche, and others. According to an Okto spokesperson, the wallet can accommodate up to 3,000 tokens, providing ample flexibility for cryptocurrency enthusiasts.Seamless fiat-to-crypto conversionKhandelwal also spoke to the value add that a more seamless asset conversion process will bring. He stated:“The integration of Transak now allows users to seamlessly convert fiat to crypto right within the app. Prior to this integration, users had to transfer funds from another decentralized wallet, such as MetaMask.”Transak’s integration brings a key feature to Okto — the ability for users to purchase cryptocurrencies like Bitcoin (BTC) directly within the wallet. Notably, this functionality accepts a wide range of fiat currencies, including the US dollar, euro, Hong Kong dollar, and others. Prior to the Transak integration, users were required to transfer digital assets from external wallets like MetaMask. With this development, Okto streamlines the process, enabling users to seamlessly convert fiat into crypto within the app itself.Months-long integration processIt’s worth noting that although the announcement of Transak’s support on Okto was made on Thursday, the integration process began several months earlier. As early as August, some Indian users reported encountering Transak while Okto was in the testing phase. The integration process itself commenced in April, with the official roll-out to all customers occurring in mid-September.Transak, a global Web3 payment and onboarding infrastructure provider, plays a crucial role in bridging the gap between traditional finance and the digital asset ecosystem. It is a well-established on-ramp solution in the cryptocurrency industry, with platforms like MetaMask, Coinbase, and PancakeSwap among its clientele.In recent days, Okto has also announced a partnership with ReHold, a multi-chain protocol which has been developed to enable users to maximize their crypto earnings. In the coming weeks, Okto and ReHold will work towards integrating Okto’s wallet with ReHold.The Okto-Transak integration is in line with Transak’s mission to facilitate crypto adoption by providing easy access to digital assets. Earlier this week, Transak also announced its integration with The Open Network’s (TON) wallet, known as Tonkeeper. This collaboration opens up Toncoin (TON) purchases directly with fiat currencies to users in more than 150 countries, marking a significant milestone in expanding the TON ecosystem.

news
Loading