1 reactions
OKX DEX Exploited: Wallets Authorized to the Exchange Lost Approximately $370,000
OKX DEX, a decentralized exchange and cross-chain bridge aggregator, has been exploited, with some wallets authorized to the platform losing around $400,000.
According to analysis conducted by blockchain security firm SlowMist, the issue revolves around the authorization process when users engage in exchanges on the platform.
Specifically, users authorize the TokenApprove contract, through which the DEX contract transfers the authorized tokens.
The DEX contract includes a claimTokens function that allows a trusted DEX Proxy, managed by the Proxy Admin, to make calls and transfer tokens on behalf of users.
On December 12, the Proxy Admin Owner upgraded the DEX Proxy contract to a new implementation contract via the Proxy Admin.
The new implementation contract introduced a functionality that directly called the claimTokens function of the DEX contract to transfer tokens.
OKX DEX, a decentralized exchange and cross-chain bridge aggregator, has been exploited, with some wallets authorized to the platform losing around $400,000.
According to analysis conducted by blockchain security firm SlowMist, the issue revolves around the authorization process when users engage in exchanges on the platform.
Specifically, users authorize the TokenApprove contract, through which the DEX contract transfers the authorized tokens.
The DEX contract includes a claimTokens function that allows a trusted DEX Proxy, managed by the Proxy Admin, to make calls and transfer tokens on behalf of users.
On December 12, the Proxy Admin Owner upgraded the DEX Proxy contract to a new implementation contract via the Proxy Admin.
The new implementation contract introduced a functionality that directly called the claimTokens function of the DEX contract to transfer tokens.
| 12,000 mlx | |
| 11 | |
| 1 |