Top

OKX shores up App security following bug discovery

Web3 & Enterprise·December 21, 2023, 12:42 AM

Cryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.

 

User data and asset vulnerability

The flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.

Taking to the X social media platform on Tuesday, CertiK wrote:

”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”

Photo by FLY:D on Unsplash

 

Prompt response

Recognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:

”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”

 

Ongoing exploits

This security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.

As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.

 

Industry collaboration

The collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.

Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.

This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.

The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.

With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

More to Read
View All
Policy & Regulation·

Feb 27, 2024

Korean and U.S. regulators to discuss recognizing NFTs as virtual assets in May

Lee Bok-hyun, the governor of South Korea’s Financial Supervisory Service (FSS), is set to have a meeting with Gary Gensler, the chair of the U.S. Securities and Exchange Commission (SEC), in May. The purpose of their meeting is to discuss whether to classify non-fungible tokens (NFTs) as virtual assets. Currently, NFTs are not seen as virtual assets in Korea, but there is a high likelihood of them being acknowledged as such following the meeting in May, local financial media outlet Edaily reported.Photo by Andrey Metelev on UnsplashLack of definition for NFTsAn NFT is a digital certificate of authenticity that is not fungible or replicable. NFTs tokenize content or assets of various types – from images, music, videos, games and artworks to real-estates – by assigning a unique token ID to them. Many see 2018 as the year NFT technology was first introduced.  Despite its wide range of applications, no legal definition has been made for NFTs. Some view NFTs as technology, and others as virtual assets or securities. The Korean government decided not to recognize NFTs as virtual assets under the Virtual Asset Protection Act (Virtual Asset Act), effective in July. Behind this decision is a perception that NFTs are less likely to pose significant risks to the market, as a large portion of NFTs are now traded by collectors seeking to expand their private collections.  However, NFTs are increasingly seen as speculative destinations by many investors over time, as prices of virtual assets including BTC surge. This shift backs the local movement to recognize NFTs as well as spot bitcoin ETFs as virtual assets. Opposition from NFT businessesBlockchain industry insiders say defining NFTs is of utmost importance, noting that classifying NFTs as virtual assets headfirst could deal a heavy blow to businesses in this sector. One finance insider mentioned that defining NFTs comes down to understanding their purposes and how they are utilized. If NFTs are primarily used for speculative purposes or as currency, they could be recognized as virtual assets, the person said.  The biggest resistance is coming from NFT-related businesses. That is because recognizing NFTs as virtual assets would require these businesses to obtain a virtual asset service provider (VASP) license from the financial authority, which takes significant costs and workforce in the process. A CEO of a blockchain startup, who preferred to remain anonymous, expressed concerns about the possibility of NFTs becoming virtual assets, saying that such recognition would enable NFT transaction tracing, potentially leading to severe violations of human rights. While many industry insiders expect that the financial authorities will bring NFTs under the forthcoming Virtual Asset Act, the FSS stated that no decisions have been made regarding details of the upcoming meeting with the U.S. SEC. 

news
Web3 & Enterprise·

Apr 20, 2023

Koscom Partners with LG CNS to Develop Joint Security Token Platform

Koscom, the technology subsidiary of the nation’s sole securities exchange operator Korea Exchange, has partnered with LG CNS, an information technology service provider, to launch a joint security token platform, according to a Koscom announcement. Task and tech allianceThe collaboration between Koscom and Korean conglomerate LG Group’s affiliate aims to gain a competitive advantage in the increasingly crowded security token market. On Monday, Koscom signed a memorandum of understanding with LG CNS in Seoul to form a task and technology alliance for security token projects.The partnership will combine Koscom’s expertise in building tech-based capital market infrastructure with LG CNS’s blockchain technology to produce fruitful outcomes. The joint project intends to provide distributed ledgers and a joint platform for the issuance and distribution of security tokens. Securities firms operating their own platforms can also choose to use its distributed ledgers. Koscom’s preparationSince last year, Koscom has been conducting research in security token offering and has formed a working group with eight securities firms that have their own security token teams. The working group has been hosting seminars regularly since the second half of last year, and on April 4, Koscom revealed its project plan to 25 other Korean securities firms. LG CNS’s readinessLG CNS has been conducting research and development of security token technologies since last year and has complied with the Korean regulatory framework. The company manages a consortium blockchain network and has completed the development of key technologies for security token services, such as highly secure wallets.Using its corporate blockchain platform Monachain, LG CNS has achieved success in developing multiple projects, such as a pilot for central bank digital currencies involving NH Bank and Woori Bank and a non-fungible token (NFT) trading system for Bithumb Meta, a subsidiary of the major Korean crypto exchange Bithumb.Meanwhile, Koscom will support security token projects of not only securities companies but also fractional investment firms and banks. Currently, Koscom is in talks with relevant entities about building infrastructure.

news
Web3 & Enterprise·

May 27, 2023

Binance Introduces Dedicated Trading Platform in Japan

Binance Introduces Dedicated Trading Platform in JapanGlobal cryptocurrency exchange Binance made an announcement on Friday regarding its plans to establish a new trading platform exclusively for residents of Japan.The move is in compliance with Japanese laws and regulations, and a demonstration of the company coming into line with Japan’s legal and regulatory framework relative to crypto assets and crypto asset trading. While specific details such as the platform’s launch date are yet to be disclosed, Binance has assured its Japanese customers that this information will be provided in the near future.Photo by Bagus Pangestu on PexelsPlatform transitionIn terms of scheduling, we do know that a new know your customer (KYC) verification process will be available after August 1, to migrate to the new local platform for existing Japanese users on the global platform. As part of the transition process, Binance will be sending out information to Japanese residents who currently utilize their global trading platform. This communication will include instructions on procedures including further information on identity verification.To facilitate a smooth transition, Binance’s global trading platform will cease providing services to Japanese residents on November 30, 2023. Additionally, there are plans to change the company name from Sakura Exchange Bitcoin to “Binance Japan Co., Ltd.”This development marks Binance’s initial foray into the Japanese market firmly under its own brand. In November 2022, the company entered the country by acquiring Sakura Exchange Bitcoin (SEBC). The forthcoming trading platform, dedicated exclusively to domestic residents, represents the first step in Binance’s strategic approach to the Japanese market.The new services on the platform are set to launch during the summer, with future expansion plans to broaden that offering further. Binance also intends to introduce initiatives in Japan that leverage its ecosystem, including the provision of free educational resources through “Binance Academy” to promote Web3 education.Service offeringThe newly created entity will offer crypto spot trading with fiat deposit and withdrawal facility to its Japanese customers. Crypto lending products will be provided through a digital asset earn program. For those who like to dollar cost average (DCA), an automated recurring purchase feature will be provided.In 2021, Binance introduced an NFT marketplace and that will be a service that it will also extend to its Japanese customers. Upon launch of the dedicated service, crypto derivative trading will not be offered although it is understood that it may be offered at a later stage. Derivatives are likely to be under much closer scrutiny by the Japanese regulator than Binance’s other products.It is worth noting that Binance had previously received a warning from the Financial Services Agency (FSA) for offering cryptocurrency trading services to Japanese residents without proper registration. With its full-fledged entry into the Japanese market, it remains to be seen what impact this move will have. Will it accelerate the regulatory landscape and the adoption of Web3 technology in Japan from a global perspective?Additionally, how smoothly will Binance be able to acquire new accounts while competing with domestic business operators? These developments warrant close attention as they unfold.

news
Loading