Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Web3 & Enterprise·

Feb 29, 2024

Circle forges partnership with Japan’s Coincheck

In a bid to expand the utility of USDC (USD Coin) in Japan, Coincheck, a cryptocurrency trading platform based in Tokyo, has unveiled a strategic collaboration with Circle Internet Financial, the global fintech firm and the issuer of the USDC stablecoin. Broadening USDC accessibilityThe partnership, announced on Feb. 27, signals Coincheck's proactive stance towards broadening accessibility to the USD-pegged coin within Japan's cryptocurrency landscape. This move is particularly noteworthy given Coincheck's stature as a subsidiary of Monex Group, a major securities firm that acquired a controlling interest in Canadian crypto asset management firm 3iQ in December of last year. Coincheck, established in 2014 and boasting a user base of 1.91 million verified accounts as of January 2024, is poised to play a pivotal role in driving USDC adoption within Japan.Photo by Takashi Miyazaki on UnsplashRegulatory hurdlesRegulatory hurdles remain significant for the widespread adoption of USD-backed digital assets within the east Asian country. Presently, major Japanese cryptocurrency exchanges have refrained from listing such coins, awaiting regulatory approval under the jurisdiction of the Japanese Payment Services Act, which mandates obtaining "Electronic Payment Instrument Services" registration. Despite these challenges, fiat-pegged coins like USDC and USDT continue to enjoy substantial popularity across Asia, reflecting a burgeoning interest in stablecoins as reliable vehicles for value transfer and storage. Oki Matsumoto, managing director and chairman of Coincheck, emphasized the strategic significance of the partnership in catalyzing growth within Japan's crypto ecosystem and the broader blockchain industry. He expressed optimism regarding the collaborative efforts between Coincheck and Circle in advancing the adoption of digital assets in the Japanese market. Circle’s ongoing focus on JapanCircle's engagement with Japan is not unprecedented, as the company had previously entered into a memorandum of understanding (MOU) with SBI Holdings, a formidable player in Japan's financial sector. This partnership aimed to spearhead digital currency innovation, streamline cross-border transactions and enhance liquidity in the digital asset market. Last month Circle identified the Asia-Pacific (APAC) region as being ripe for stablecoin adoption. It outlined that it was particularly encouraged by the ongoing development of forward-looking regulatory frameworks in Asian centers like Singapore, Hong Kong and Japan. In a parallel development, Circle recently announced a partnership with Overdare, a joint venture which was originally formed in September between gaming firms Krafton and Naver Z, poised to redefine the landscape of mobile user-generated content (UGC) gaming. This collaboration seeks to empower game content creators by integrating Circle's user-controlled Programmable Wallets, enabling them to seamlessly receive USDC payouts for their creative endeavors. Circle's foray into the creator economy through its collaboration with Overdare demonstrates another strategy that the company is employing to bring about adoption and gain traction in the market, pivoting towards Web3 innovation and its emphasis on development within the APAC region. With USDC boasting a market capitalization of approximately $27 billion and circulating supply exceeding $24 billion, as reported in its December 2023 reserve attestation, Circle's strategic partnerships with Coincheck and Overdare herald the latest efforts to trigger adoption within the Japanese and broader APAC region’s cryptocurrency and gaming spheres.   

news
Web3 & Enterprise·

Feb 14, 2024

High-profile sports sponsorships driving Crypto.com user base expansion

Crypto.com, the Singapore-headquartered cryptocurrency exchange platform, has outlined that it has seen significant growth thanks to high-profile sports sponsorship and advertising. Reaping the rewardsThe company has established advertising partnerships with Formula 1 (F1) motor racing and the Ultimate Fighting Championship (UFC). These lucrative sponsorship deals have propelled the exchange into the spotlight of two massive fan bases, contributing to its expansion. In an interview with Cointelegraph last week, Eric Anziani, president and chief operating officer of Crypto.com, discussed the company's successful advertising campaigns with F1 and the UFC, as well as its naming rights deal for the Crypto.com Arena in downtown Los Angeles. In 2021, what was then the Staples Center was renamed to the Crypto.com Arena in a $700 million naming rights deal. Anziani expressed gratitude for these partnerships, emphasizing the importance of staying top of mind for users in the competitive cryptocurrency market.  That same year, the company signed a multi-year partnership deal with leading French football club Paris Saint-Germain (PSG), rolling out various PSG-related marketing activities since then.Photo by Austin Loveing on UnsplashBrand recognition benefitsMarket surveys conducted by Crypto.com indicate a high level of global awareness and brand recognition among retail cryptocurrency users. The exchange's logo prominently displayed during F1 races and UFC events has helped it reach millions of fans worldwide. ESPN reports an average of 1.11 million viewers per race for the 2023 F1 season in the United States alone, with global viewership exceeding one billion over the entire race calendar. Similarly, the UFC boasts a global audience, with some of its biggest fights attracting millions of pay-per-view viewers. Anziani highlighted the effectiveness of these partnerships in bringing people into the cryptocurrency space.  User base approaching 100 millionThese partnerships have significantly contributed to Crypto.com's growing user base, which is approaching 100 million users in 2024, up from an estimated 80 million in the previous year. Anziani discussed the factors that drive users' choice of exchange platforms, emphasizing the importance of compliance, security, convenient access to cryptocurrency and competitive fees. He noted that different users prioritize different aspects based on their trading preferences and requirements. The firm is not alone in pursuing high-profile sports sponsorship deals. Rival platform OKX has an ongoing sponsorship deal in place with Manchester City Football Club in the English Premier League (EPL). It also has doubled down recently on the sponsorship of F1 racing team McLaren. Other notable partnerships include crypto gambling platform Stake.com’s sponsorship of Sauber F1, crypto exchange platform Kraken’s deal with Williams F1 and BingX’s sleeve sponsorship agreement with Chelsea football club in the EPL. High-profile marketing initiatives are alive and well, although in a much more sober way than in 2022 when six crypto companies featured in Super Bowl advertising in the United States. Kraken’s chief marketing officer, Mayur Gupta, recently stated that the Super Bowl is no longer an effective means of promotion for crypto companies.  

news
Policy & Regulation·

Oct 24, 2025

U.S.-sanctioned Huione Group suspected of supporting crypto transactions in Korea

A Cambodia-headquartered financial group recently cut off from the U.S. financial system is suspected of having operated in South Korea, raising fresh questions about cross-border crypto and currency flows tied to the group. According to the Dong-A Ilbo, which cited data from the Korea Customs Service (KCS), Huione Group—now sanctioned by the U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN)—appears to have run a currency exchange in Seoul from 2018 to July 2024. The outlet reported that a banner on the premises displayed a logo identical to Huione’s, prompting suspicions about its ownership and control.Photo by Aleksandar Pasaric on PexelsTies to North Korean hackersThe exchange reported conducting roughly $20,000 in annual currency conversions during that period, excluding cryptocurrency transactions. The timeline overlaps with a period in which Huione Group reportedly received $150,000 in cryptocurrency from the North Korean hacking group Lazarus.  Connections also extend to Cambodia. Panda Bank—a local lender that shares a building with Huione subsidiaries—supports USDT transactions originating from South Korea. Panda Bank director He Yanming is listed as the owner of Huione Crypto, a virtual asset service provider (VASP), suggesting potential links between operations in Seoul and Phnom Penh. These developments come against the backdrop of a U.S. investigation disclosed in May, in which FinCEN said Huione’s business networks, including payments arm Huione Pay, collectively laundered at least $4 billion in illicit proceeds between August 2021 and January 2025. Crypto used in $2.6B illegal conversionsMeanwhile, recent KCS data also shows a rise in illegal currency conversions involving cryptocurrency by foreign nationals. The Korea Economic Daily reported conversions totaling 432 billion won ($302 million) in 2021, climbing to 836 billion won ($584.5 million) in 2023 and 956 billion won ($668.4 million) last year. Over the past eight years, the total amount involved in such cases reached 3.7 trillion won ($2.59 billion) across 28 instances. By value, Chinese nationals accounted for 84.1% of the total, followed by Australians (11.1%), Vietnamese (3.2%), and Russians (1.6%). The growing prevalence of cryptocurrency in illicit activity parallels a broader surge in crypto investment within the country. Many South Koreans have turned to digital assets, often with home ownership as a long-term goal. Trading on local exchanges, Bloomberg reported, is heavily skewed toward more volatile altcoins, which make up more than 80% of total volume.  That stands in contrast to global markets, where investors largely focus on Bitcoin and Ethereum, which together make up more than half of overall trading. The momentum in local crypto investment intensified after Donald Trump’s U.S. presidential victory, with crypto trading in Korea reaching $27 billion in December 2024, about 80% of turnover on the KOSPI stock index. The investigation underscores the growing challenge for regulators in tracking and containing cross-border financial networks that rely on cryptocurrency and informal money transfers. As crypto adoption deepens in South Korea and scrutiny widens abroad, authorities find themselves navigating an increasingly intricate intersection of financial opportunity, enforcement, and risk. 

news
Loading