OKX Hack

OKX DEX suffered an access control exploit on Dec 12, 2023, resulting in a loss of 2,390,976 USD worth of assets, including USDT, USDC, and WETH.

OKX DEX, a trading aggregator for cross-chain transactions, experienced an access control exploit on December 12, 2023. The proxy admin owner upgraded the DEX proxy contract to a new implementation contract, which may have led to the compromise of the private key of the OKX DEX. After the upgrade, tokens started being stolen from the platform.

The stolen native ETH was distributed between three addresses, while the rest of the stolen stable coins were bridged to Arbitrum and Avalanche chains via Stargate Bridge. The DEX proxy was removed from OKX's platform's trusted list following the incident. The total loss amounted to 2,390,976 USD worth of assets, including 142,034 USDT, 475,929 USDC, and 799.77 WETH.

Attackers Addresses:

https://etherscan.io/address/0xFacf375A…010239

https://etherscan.io/address/0x0519efac…78b8a5

Funds Holders as of Dec 14, 2023:

https://etherscan.io/address/0xfe55502a…20468f

https://etherscan.io/address/0x22a2931c…41b0f0

https://etherscan.io/address/0xa15fe801…78d5ad

Malicious Transactions:

https://etherscan.io/tx/0x7a9c0357…a1db5c

https://etherscan.io/tx/0x78bfe55b…49dcd2

https://etherscan.io/tx/0xf69cf6cc…743236

Stargate Bridging Transactions:

https://etherscan.io/tx/0xd2b424b1…99ed28

https://etherscan.io/tx/0x444fe10b…d9dd8b