OKX Pauses DEX Aggregator to Address Security Concerns

Crypto exchange OKX has temporarily halted its decentralized exchange (DEX) aggregator in response to security concerns and recent “attacks” targeting its platform. 

The exchange announced the pause on Sunday, citing the need to address incomplete blockchain tagging and implement new security features to prevent misuse by malicious actors. 

Blockchain tagging refers to the process of labeling transactions on a blockchain to accurately identify and track them on explorers.

“We detected a coordinated effort by Lazarus group to misuse our defi services,” the company said. “At the same time, we've noticed an increase in competitive attacks aiming to undermine our work.”

OKX Pleads Guilty, Pays $500 Million for Illegally Serving US Customers

Cryptocurrency exchange OKX's Aux Cayes FinTech Co. Ltd affiliate has settled with the U.S. Department of Justice, and has agreed to pay over $500 million worth of penalties after pleading guilty to serving U.S. customers without a money transmitter license and not following anti-money laundering laws. OKX will criminally forfeit $420.3 million, according to a DOJ statement, and pay an $84.4 million criminal fine. The $420.3 million represents fees earned from U.S. customers, which the firm said...

The move comes amidst scrutiny of OKX’s role in the alleged laundering of $100 million from the Bybit hack. OKX did not immediately respond to Decrypt’s request for comment.

In January, Bybit, one of the largest crypto exchanges, suffered a devastating hack in which nearly $1.5 billion in Ethereum (ETH) and ETH-related tokens were stolen, making it the largest hack in crypto history. 

The hack was attributed to the Lazarus Group, a notorious North Korean hacking collective believed to be responsible for a string of high-profile cybercrimes.

Bybit CEO Ben Zhou recently pointed out that nearly $100 million, or 40,233 ETH, from the $1.5 billion hack had flowed through OKX’s Web3 platform, with a significant portion of the funds now lost and untraceable.

In a related development, Bloomberg reported on March 11 that regulators in the European Union are reportedly investigating OKX’s decentralized finance (DeFi) platform, questioning whether the exchange’s Web3 service is compliant with the EU’s Markets in Crypto-Assets (MiCA) regulation.

What Caused Bybit's $1.4 Billion Ethereum Hack? New Details Revealed

Multi-signature wallet provider Safe said Thursday that last month’s $1.4 billion Ethereum heist from Dubai-based centralized exchange Bybit stemmed from a compromised developer laptop.  After multiple independent reports pointed to a malicious code injection to Safe’s infrastructure, the firm, alongside security experts at Mandiant, released more details Thursday, saying that the investigation had reached a “critical checkpoint.”  “We present these findings in the spirit of transparency and to...

The report, citing people familiar with the matter, said the exchange’s Web3 service, which includes its wallet platform, may be used for illicit activities, prompting discussions among EU regulators about potential penalties.

OKX denied the allegations, refuting the claim that it is under investigation by European regulators and calling the report “misleading.”

“We urge our community to see these attacks for what they really are - deliberate attempts to mischaracterize our role and the value we bring to the ecosystem,” OKX said in the Sunday statement. 

Haider Rafique, the company’s global CMO, called the accusations "preposterous," saying OKX had implemented measures to prevent the misuse of its services. 

“We did the exact opposite,” Rafique noted. “We froze funds moving to our CEX and launched new features to detect/block hackers' addresses from using our DEX or wallet services.” 

Bybit Seeing 'Massive Withdrawals' After $1.4 Billion Ethereum Theft: CEO

Centralized cryptocurrency exchange Bybit is struggling to keep up with withdrawals following a hack that saw over $1.4 billion worth of Ethereum and related assets swiped early Friday. In a livestream following the incident, Bybit co-founder and CEO Ben Zhou said that the firm has "experienced massive withdrawals in the last two hours." However, he added that there are thousands of pending withdrawals that the firm is still working through because it needs to move liquidity around. Zhou told vi...

In light of the situation, OKX confirmed it had consulted with regulators and made the decision to pause its DEX aggregator services proactively.

OKX's recent troubles are compounded by a settlement with the U.S. Department of Justice (DOJ). 

Last month, OKX’s affiliate, Aux Cayes FinTech Co. Ltd, agreed to pay over $500 million in penalties after pleading guilty to operating without a money transmitter license and failing to follow anti-money laundering laws. 

The settlement stems from accusations that OKX facilitated illicit transactions, with the DOJ stating that OKX violated U.S. laws by actively seeking American customers.

Edited by Sebastian Sinclair