Based on blockchain safety firm SlowMist, OKX DEX, a decentralized trade aggregator platform, misplaced cryptocurrency valued at over $400,000.
An attacker was capable of switch tokens that customers had not allowed by compromising the administration privileges of a market maker contract, in line with the reason for the vulnerability.
On the OKX DEX aggregator platform, a deprecated proxy contract was the topic of a current vulnerability that allowed a hacker to acquire administration entry to the contract with out authorization.
OKX DEX: Deprecated Contract Raises Considerations
When a protocol stops actively utilizing a contract to hold out person transactions, it’s thought of deprecated. It seems that OKX has up to date the contract however hasn’t totally stopped utilizing it.
SlowMist Safety Alert: OKX DEX Proxy Admin Proprietor’s Personal Key Suspected to be Leaked
Based on info from SlowMist Zone, the OKX DEX contract seems to have encountered a difficulty. After SlowMist’s evaluation, it was discovered that when customers trade, they authorize…
— SlowMist (@SlowMist_Team) December 13, 2023
The claimTokens operate of the OKX DEX good contract skilled an issue, in line with blockchain safety agency SlowMist. The TokenApprove contract, which required person authorization, invokes the flexibility to ship money to a reliable DEX Proxy.
On December 12, the SlowMist crew reported that the OKX DEX Proxy Admin Proprietor upgraded the DEX Proxy contract with a brand new implementation. The aim of this new implementation was to invoke the claimTokens operate straight from the DEX contract.
The trade stated that 18 of the accredited addresses for the contract had been compromised, and linked the occasion to the administration rights of a cancelled OKX DEX market maker contract being compromised.
Moreover, the trade pledged to pay again all impacted customers. It could additionally perform a complete safety examination with the intention to cease one thing comparable from taking place once more.
We remorse to tell you {that a} deprecated good contract on OKX Dex has been compromised. We have now taken fast motion to safe all person funds and revoke the contract permissions. We’re working with related businesses to find the stolen funds and can reimburse affected… pic.twitter.com/zDIjhb3ETz
— OKX Web3 (Pockets | DeFi | NFT) (@okxweb3) December 13, 2023
OKX Hack: Precise Damages Unknown
Based on PeckShield, one other researcher specializing in blockchain safety, this vulnerability has price over $2.76 million.
Within the final 30 days, OKX DEX is believed to have had over 50,000 energetic person wallets; nonetheless, it’s unknown what number of customers had been impacted by the newest hack.
Customers ought to make use of warning whereas speaking with DeFi protocols, particularly these supported by well-known corporations within the business, as highlighted by the OKX DEX breach.
Featured picture from Shutterstock
