Decentralized exchange (DEX) OKX recently faced a serious security incident, resulting in the loss of over $2.7 million worth of Ethereum (ETH), Tether (USDT), and USDC. PeckShield, a renowned blockchain security firm, reported that the breach was caused by the exposure of a private key, highlighting the growing concern about cybersecurity in the cryptocurrency space.
The incident occurred due to a breach in the security of an OKX DEX administrator’s private key. Security firm SlowMist suggested that a proxy administrator owner’s private key was compromised and facilitated the theft following an update to the DEX proxy contract on December 12.
Cardano on the Rise: Analysts Predict Bright Future for Altcoin
Compromised Functionality and Token Theft
The new contract implemented on the DEX made it possible for attackers to directly call the claimTokens function, allowing the transfer of tokens. Furthermore, attackers used this vulnerability to initiate token theft through Proxy DEX, continuing the attack even after a subsequent update to the contract.
In response to the attack, OKX stated that the incident involved a deprecated smart contract. Therefore, DEX took immediate action to protect users’ funds and revoke the compromised contract’s permissions. Accordingly, OKX committed to reimbursing affected users with US$370,000 and initiated a complete review to prevent similar incidents in the future.
🚨SlowMist Security Alert: OKX DEX Proxy Admin Owner’s Private Key Suspected to be Leaked🚨
According to information from SlowMist Zone, the OKX DEX contract appears to have encountered an issue. After SlowMist’s analysis, it was found that when users exchange, they authorize…
— SlowMist (@SlowMist_Team) December 13, 2023
Binance Research Reveals Growing Use of Cryptocurrencies for Extra Income
The importance of the Incident
Furthermore, this attack on OKX DEX illustrates the critical need for robust security measures on decentralized exchanges. Therefore, as the cryptocurrency market continues to grow, the security of digital assets becomes a primary concern for users and platforms. The OKX DEX Ethereum incident serves as a reminder of the importance of vigilance and rapid response to security threats.
Disclaimer:
The views and opinions expressed by the author, or anyone mentioned in this article, are for informational purposes only and do not constitute financial, investment or other advice. Investing or trading cryptocurrencies carries a risk of financial loss.
Source: https://portalcripto.com.br/ataque-cibernetico-compromete-us-27-milhoes-em-ethereum-na-okx-dex-revela-peckshield/
