Research: Serious Shortcomings Exist in OKX Security Settings
Author: Dilation Effect Link: https://x.com/dilationeffect/status/1800116534133792841 Given the recent security incidents involving OKX users, we were curious about the causes of these attacks. As ordinary users, we decided to spend half an hour conducting a quick analysis of OKX’s user security settings, and the results were quite surprising. Note: The analysis was conducted on June 10, 2024, at 5 PM Singapore Time. 1. Despite users binding Google Authenticator (GA), verification allows switching to lower security methods, bypassing GA verification. Users bind GA considering its higher security level. However, OKX allows switching to lower security verification methods, such as SMS, during sensitive user operations like adding a whitelist address, withdrawals, and various verification changes, effectively bypassing GA verification. 2. Sensitive user operations, such as disabling phone verification, disabling GA verification, and changing the login password, do not trigger a 24-hour withdrawal ban. The withdrawal ban only triggers when logging in on a new device, representing a compromise in the risk control measures for password changes. 3. Whitelist address withdrawals do not employ dynamic verification based on withdrawal amounts. Once an address is added to the whitelist, withdrawals up to the limit can proceed without additional verification. Unlike other exchanges that set a limit requiring re-verification for larger amounts. This quick analysis reveals that OKX’s security settings lack baseline design. Possibly to enhance user experience, OKX has made significant compromises in security. Whether this design is good or bad, users will make their own judgments and choices. Dilation Effect would like to remind users to bind GA to their accounts. Otherwise, they may end up working for hackers, as email and SMS are easily susceptible to attacks. Follow us Wu Blockchain is free today. But if you enjoyed this post, you can tell Wu Blockchain that their writing is valuable by pledging a future subscription. You won't be charged unless they enable payments. |
Older messages
Asia's weekly TOP10 crypto news (Jun 3 to Jun 9)
Sunday, June 9, 2024
1. Hong Kong Regulatory News This Week 1.1 Hong Kong Officials Visit Europe to Promote Web3 link On June 3, Christopher Hui, Secretary for Financial Services and the Treasury of Hong Kong, embarked on
Weekly Project Updates: EigenLayer Achieves Record TVL, Wormhole Launches Governance, StarkWare Backs Bitcoin Scal…
Saturday, June 8, 2024
1. EigenLayer TVL Surpasses $2 Billion, Continues to Achieve Historic Highs link EigenLayer's Total Value Locked (TVL) has surpassed $2 billion, marking a historical high and solidifying its
WuBlockchain Weekly: ECB Lowers Interest Rates, Bybit Unexpectedly Opens Registration for Mainland China Users, Bi…
Friday, June 7, 2024
1. Bitcoin Spot ETF Sees $887 Million Net Inflows on June 4, Sustains 17-Day Inflow Streak link On June 4, Grayscale's GBTC ETF experienced a net inflow of $28.195 million. On the same day, the
Mining News in May:Tether Mega-Investment, Riot Wants to Acquire BitFarms, Canaan's New Models, sponsored by Bitde…
Wednesday, June 5, 2024
Title sponsored by Bitdeer, a NASDAQ-listed mining company. 1. Bitdeer announces up to $150 million in private placement funding. Tether regard Bitdeer as one of the strongest vertically integrated
In-depth Analysis: Why was the Binance Account Stolen after Using the Malicious Plug-in?
Tuesday, June 4, 2024
By:@SlowMist_Team Source:https://web3caff.com/zh/archives/94779 https://foresightnews.pro/article/detail/61654 On March 1, 2024, according to Twitter user @doomxbt, there was an abnormal situation with
You Might Also Like
🥛 These $BTC vs. Gold ETF charts are wrong 🙅
Tuesday, October 22, 2024
(There. We said it).
Crypto industry wields growing influence in US politics with donations climbing over $190 million
Tuesday, October 22, 2024
Crypto-driven donations are playing a crucial role in toss-up districts as the industry tries to secure political allies. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Introducing Exchange Flow Metrics
Tuesday, October 22, 2024
New metrics tracking exchange-flows in BTC and ETH ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Current status of Iran's local cryptocurrency exchanges: tens of millions of users and severe US sanctions
Tuesday, October 22, 2024
Amid escalating economic challenges and international sanctions, cryptocurrency users in Iran are becoming increasingly concerned about the security and reliability of centralized exchanges. ͏ ͏ ͏ ͏ ͏
🥛 $BTC breakout: confirmed! 🫡
Monday, October 21, 2024
PLUS: The largest acquisition in crypto history! 💰
Global regulators discussing ways to ‘eliminate’ Bitcoin highlights cracks in fiat system
Monday, October 21, 2024
Industry experts said the regulators' paper is one of the most aggressive in recent history. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
📈 BTC futures open interest on crypto exchanges soars to a one-year high; Crypto.com launched the Funding Arbitra…
Monday, October 21, 2024
BTC futures open interest on exchanges soars to a one-year high; Crypto.com launched the Funding Arbitrage Bot on the Crypto.com Exchange; SEC approved the NYSE and CBOE's BTC ETF options listings.
CBOE And NYSE Spot Bitcoin ETF Applications Finally Approved By The SEC
Monday, October 21, 2024
We bring you the top stories in crypto every week! Stories like... Monday Oct 21, 2024 Sign Up Your Weekly Update On All Things Crypto TL;DR CBOE And NYSE Spot Bitcoin ETF Applications Finally Approved
Bitget's New Chief Legal Officer Hon Ng: Former Binance General Counsel Who Assisted in Musk's Acquisition of Twit…
Monday, October 21, 2024
Author: Azuma (@azuma_eth) ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
What you missed this week 👀
Sunday, October 20, 2024
Wen banana zone? Will Solana flip Ethereum?