OKX has confirmed that some user accounts have been compromised due to identity theft.

In a post-mortem on Cryptocurrency exchange: “We cannot disclose specific details as the matter is under investigation by judicial authorities.” wrote From the statement.

The security breach surfaced on social media over the weekend after two OKX users assert Their account was compromised and leaked. Blockchain security company slow mist He pointed out the similarities between the two incidents. A new API key was generated after the user received a risk notification SMS text from Hong Kong to verify their account.

Web3 Security Group Dilation Effect made a claim On Monday, attackers reportedly exploited a security hole in OKX that allowed users to turn off Google authentication or phone verification without triggering a 24-hour withdrawal freeze system in the event of certain user activity.

However, the exchange refuted this claim in a post-mortem. OKX said, “This incident has nothing to do with the choice of Google authentication or SMS authentication.”

OKX added that it has already completed compensation in the latest X post and will continue to compensate affected users. Woo Blockchain reported Two users whose accounts were compromised received full compensation from the exchange on Wednesday.

OKX declined to comment on The Block’s request for additional details about the incident, including the exact number of users affected and whether all users were compensated for their losses.

Disclaimer: The Block is an independent media outlet delivering news, research and data. As of November 2023, Foresight Ventures is a majority investor in The Block. Foresight Ventures invests in other companies in the cryptocurrency space. Cryptocurrency exchange Bitget is an anchor LP of Foresight Ventures. The Block continues to operate independently to provide objective, impactful and timely information about the cryptocurrency industry. Below are our current financial disclosures.

© 2023 The Block. All rights reserved. This article is provided for informational purposes only. It is not provided or intended to be used as legal, tax, investment, financial or other advice.