OKX Users in Panic Unusual Aggregation of 53 BTC Continuous Theft of User Assets OKX Official Investigating the Truth Stay Calm

Cryptocurrency exchange OKX has recently experienced several incidents that have caused concern among users:
Incident 1: The exchange wallet was found to be consolidating assets with high Gas Fees, which was abnormal.
Incident 2: Multiple users reported receiving abnormal email notifications, leading to assets being transferred out due to malicious phone verification codes.
Currently, Incident 1 has been explained by the official source and the situation is under control; Incident 2 is still under investigation by the official source, with external cybersecurity teams assisting in community prevention.
OKX Panic Incident 1: Abnormal Consolidation
OKX Panic Incident 2: User assets continuously stolen
Should enable 2FA verification
OK response to user theft incidents
In a series of actions considered to be asset consolidation, OKX spent 5.3 BTC on transaction fees, which was highly unusual. Observers pointed this out, causing panic. Similar incidents have occurred in the past with Binance.
In response, OKX officials explained, “At the time, we were testing a consolidation process, which was halted when questioned.”
Several users from mainland China have stated on Twitter that they were each stolen amounts like 1 million USDT or 800,000 USDT, and encountered similar abnormal situations.
Twitter account @AsAnEgg stated that these individuals all experienced the following abnormal conditions:
– OK-related email accounts were flooded with spam
– Ethereum was bought frantically at market price
– Ethereum was withdrawn using SMS verification codes
Additionally, their phones were all iPhones used only for trading, and they never clicked on any links.
Cybersecurity expert Yu Xian stated that, in addition to the above characteristics, the victims received SMS notifications from Hong Kong and new API Keys (with withdrawal and trading permissions) were created. He believes there is a premeditated criminal group behind this, and they are currently tracking related addresses.
Yu Xian, a cybersecurity expert, stated that all the victims mentioned above did not enable 2FA verification. While it is unclear if this is related, basic protection measures should still be taken.
In response to Chain News, OKX stated that they take the “user assets stolen from the trading platform” feedback from today’s online community very seriously. They have contacted the relevant users and are currently investigating the situation. If it is determined to be the platform’s responsibility, they will take proactive measures. Furthermore, the platform will announce the results of the investigation as soon as it is completed, urging everyone to wait patiently and refrain from unnecessary speculation.
OKX
Consolidation
Theft