{"id":125204,"date":"2025-03-17T05:15:47","date_gmt":"2025-03-17T05:15:47","guid":{"rendered":"http:\/\/cryptospotters.net\/?p=125204"},"modified":"2025-03-17T05:15:47","modified_gmt":"2025-03-17T05:15:47","slug":"okx-suspends-dex-aggregator-to-stop-further-misuse-by-lazarus","status":"publish","type":"post","link":"http:\/\/cryptospotters.net\/?p=125204","title":{"rendered":"OKX suspends DEX aggregator to stop \u2018further misuse\u2019 by Lazarus"},"content":{"rendered":"<p>Source: Cointelegraph.com NewsCrypto exchange OKX has temporarily paused its decentralized exchange aggregator to prevent \u201cfurther misuse\u201d by North Korean hacking collective Lazarus Group.<br \/>\n\u201cRecently, we detected a coordinated effort by Lazarus group to misuse our defi services,\u201d said OKX on March 17.<br \/>\n\u201cAfter consulting with regulators, we made the proactive decision to temporarily suspend our DEX aggregator services. This move allows us to implement additional upgrades to prevent further misuse.\u201d\u00a0<br \/>\nThe OKX helpdesk confirmed that the DEX aggregator was temporarily suspended for an \u201cinternal review and upgrade\u201d but did not provide a timeline.\u00a0<br \/>\nIt added that crypto wallet services will remain available to all customers, but it will \u201cpause new wallet creation in select markets during this time.\u201d<br \/>\nSource: OKXOn March 11, Bloomberg reported that European Union financial watchdogs were investigating the firm\u2019s DEX aggregator, called OKX Web3, and its wallet services for their alleged role in laundering funds from the Bybit hack.<br \/>\n\u201cOver the past few days, we\u2019ve faced targeted media attacks questioning our integrity and operations,\u201d the firm stated in a blog post. It added that it \u201ccan\u2019t ignore the fact that these attacks are happening at a time when we are actively fighting against financial crime.\u201d<br \/>\nAccording to Bybit CEO Ben Zhou, nearly $100 million from the $1.5 billion Bybit hack had been laundered through OKX\u2019s Web3 proxy, with a portion of the funds now untraceable.<br \/>\nOKX responded on March 11, stating that the \u201cBloomberg article is misleading,\u201d saying that when Bybit got hacked, OKX reacted in two ways: by freezing associated funds from moving into its CEX, and developing the new hack detection features.<br \/>\nRelated: Lazarus Group sends 400 ETH to Tornado Cash, deploys new malware<br \/>\nOKX stated that the goal is to ensure that explorers properly highlight the actual DEX processing trades \u201crather than mistakenly identifying our aggregator as the point of trade.\u201d<br \/>\nThe exchange has already deployed a \u201chacker address detection system\u201d for its DEX aggregator in addition to a system to track the hacker\u2019s latest addresses and block them on its centralized exchange in real time.<br \/>\n\u201cWe already rolled out a lot of controls for OKX Web3 to fight with the misuse, including prohibited markets\u2019 IP blocking and real-time black address detection and blocking system,\u201d said OKX CEO Star Xu on March 17.<br \/>\nThe firm also clarified that the OKX Web3 DEX aggregator is not a custodian of customer assets, adding that its function is to provide access to liquidity across multiple protocols. However, \u201csome have deliberately misrepresented our platform,\u201d it said.\u00a0<br \/>\nMagazine: ETH may bottom at $1.6K, SEC delays multiple crypto ETFs, and more: Hodler\u2019s Digest<a href=\"https:\/\/cointelegraph.com\/news\/okx-suspends-dex-aggregator-further-misuse-lazarus?utm_source=rss_feed&amp;utm_medium=rss&amp;utm_campaign=rss_partner_inbound\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Source: Cointelegraph.com NewsCrypto exchange OKX has temporarily paused its decentralized exchange aggregator to prevent \u201cfurther misuse\u201d by North Korean hacking collective Lazarus Group. \u201cRecently, we detected a coordinated effort by&hellip; <\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"_links":{"self":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts\/125204"}],"collection":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=125204"}],"version-history":[{"count":0,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts\/125204\/revisions"}],"wp:attachment":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=125204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=125204"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=125204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}