The recent attack on the OKX decentralized exchange (DEX) resulted in a loss of more than $2.76 million due to a private key leakage. As of now, the affected contracts have been deactivated, and the exchange is taking immediate steps to compensate affected users.
OKX DEX attack: Loss of over $424,000 in user funds
Reports indicate that the exploiters targeted several wallet addresses authorized on the OKX DEX, leading to the draining of funds traced to an address holding over $424,000. The incident report disclosed that the hack specifically targeted a market maker contract that facilitated DEX trading. However, the attacker managed to siphon funds from 18 addresses that had approved the contract for token trading.
Despite the breach, OKX reassured users that the majority of assets on the platform remain secure. Blockchain security firm SlowMist, which is investigating this recent incident, attributed the breach to a leaked private key for OKX’s proxy admin account. This compromised admin account allowed the attacker to upgrade the DEX’s proxy contract to a malicious version, directly stealing user funds.
Notably, the proxy admin continued upgrading the contract after the initial theft, persistently stealing additional tokens. OKX responded promptly by removing the corrupted proxy contract from the DEX’s trusted permission list. Additionally, the exchange has committed to compensating all affected users, conducting a thorough security audit, and reorganizing abandoned contracts to prevent future vulnerabilities.
Amid the ongoing investigation, another blockchain security firm, PeckShieldAlert, posted on X (formerly Twitter) and stated that OKX experienced a $2.76 million crypto loss. The recent security breach was attributed to a Private Key Leakage attack, resulting in the unauthorized withdrawal of cryptocurrencies valued at $2.76 million.
Global regulatory responses to safeguard Crypto investors
However, given the rapid evolution and the increasing number of crypto investors, governments worldwide are planning to implement regulations to safeguard their investors from such activities. This year, the losses due to the attack are smaller compared to 2022.
This sudden decline in crypto heists in the realm of cryptocurrency might be attributed to actions taken against North Korean hackers. Recently, the United States, Japan, and South Korea teamed up to dismantle a major North Korean hacker group, including the Lazarus Group. Additionally, in the last five years, these hackers have stolen more than $5 billion worth of crypto.
