Audit log

Every state-changing event for OKX DEX: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-27 18:12:39Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,554,260

   sig

   3UYd5ajeihyi…2prJmg8kcopyexplorer ↗

   hash

   FRE8b9WXEZBg…oPymy6Bicopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (8694 B) ▸

   {"actor":"system:backfill","investigation_id":"ce84ec9f-aae8-4f31-8aec-4fb339bbc913","kind":"publish","page_slug":"okx-dex","published_at":"2026-05-27T18:12:39.286Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"OKX DEX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/267405/okx-dex-suffers-apparent-2-7-million-exploit-following-suspected-private-key-leak","type":"other","url":""},{"credibility":3,"name":"https://olympixai.medium.com/unmasking-the-malicious-okx-dex-upgrade-f6912449f963","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=okx-dex-hack","type":"other","url":""},{"credibility":3,"name":"https://www.banklesstimes.com/news/2023/12/13/okx-hacked-for-dollar27m-after-proxy-admin-private-key-is-leaked/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2023/12/13/okx-dex-hacked-and-suffers-loss-424k-after-a-security-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/02/24/okx-close-to-large-settlement-agreement-with-u-s-regulators-source","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/okx-pleads-guilty-to-illegally-operating-in-the-us-pays-505-million/","type":"other","url":""},{"credibility":3,"name":"https://www.fintechfutures.com/regulations-compliance/okx-resolves-us-doj-investigation-agrees-to-pay-around-504m-in-penalties","type":"other","url":""},{"credibility":3,"name":"https://www.pymnts.com/aml/2025/okx-crypto-exchange-fined-500-million-for-anti-money-laundering-violations/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/okx-enters-the-united-states-market-following-505-m-settlement","type":"other","url":""},{"credibility":3,"name":"https://constantinecannon.com/whistleblower/whistleblower-insider-blog/not-ok-cryptocurrency-exchange-platform-okx-violated-u-s-anti-money-laundering-laws-and-will-pay-504m-in-penalties/","type":"other","url":""},{"credibility":3,"name":"https://www.sanctions.io/blog/okxs-500-million-penalty-key-takeaways-for-aml-pros","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/346538/okx-suspends-dex-aggregator-following-lazarus-misuse-and-heightened-eu-scrutiny","type":"other","url":""},{"credibility":3,"name":"https://www.dlnews.com/articles/regulation/okx-swept-up-in-bybit-hack-after-thieves-launder-100m-on-its-web3-platform/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/okx-suspends-dex-aggregator-further-misuse-lazarus","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/okx-suspends-web3-aggregator-amid-probe-into-100m-bybit-hack-laundering-links/","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/crypto-okx-shuts-down-exchange","type":"other","url":""},{"credibility":3,"name":"https://www.fintechweekly.com/magazine/articles/okx-halts-dex-services-following-lazarus-group-exploitation","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/malta-issues-12-million-fine-to-okx-for-past-aml-failures-amid-mica-license/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/malta-fines-okx-crypto-exchange-1-2-million-aml-breaches","type":"other","url":""},{"credibility":3,"name":"https://bitcoinist.com/okx-fined-1-2-million-malta-anti-money-laundering/","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/crypto/okx-fined-1-2m-malta-violating-aml-regulations-500m-penalty/","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/crypto-exchange-okx-pays-304000-fine-in-malta-for-compliance-failures/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://olympixai.medium.com/unmasking-the-malicious-okx-dex-upgrade-f6912449f963","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/2838/okx-dex-proxy-admin-owner-s-private-key-exposed","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-okx-exploit-3fb7d826a621","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/okx-delays-onchain-perps-launch-over-regulatory-concerns","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/02/24/okx-close-to-large-settlement-agreement-with-u-s-regulators-source","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto.news/exchanges-face-heat-as-okx-funds-zachxbt-probe-into-95-rave-crash/","type":"other","url":""},{"credibility":3,"name":"https://ourcryptotalk.com/news/dsjex-bg-wealth-sharing-ponzi-collapse-zachxbt-freezes","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=okx-dex-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/analysis/is-okx-safe","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/malta-issues-12-million-fine-to-okx-for-past-aml-failures-amid-mica-license/","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/okx-pleads-guilty-to-illegally-operating-in-the-us-pays-505-million/","type":"other","url":""}]}],"sources_used":[],"summary":"OKX DEX is the decentralized exchange aggregator operated by OKX (Aux Cayes FinTech Co. Ltd.), one of the world's largest centralized crypto exchanges. In December 2023, the DEX suffered a ~$2.7 million exploit caused by a suspected private key leak and a centralized proxy upgrade mechanism with no multi-signature protection. The broader OKX entity has faced severe regulatory sanctions including a $504 million U.S. DOJ settlement in February 2025 for operating an unlicensed money-transmitting business and facilitating over $5 billion in suspicious transactions, a €1.1 million Malta AML fine, and repeated scrutiny over its DEX aggregator being used by North Korea's Lazarus Group to launder stolen funds from the $1.5 billion Bybit hack in early 2025.","timeline":[{"date":"2023-12-12","event":"OKX DEX proxy admin private key allegedly leaked; attacker upgrades DEX Proxy contract to malicious implementation and begins draining user-approved token balances via claimTokens function. Approximately $2.7 million stolen across multiple wallets.","source":""},{"date":"2023-12-12","event":"OKX publicly acknowledges exploit, describes affected contract as an 'abandoned market maker contract,' removes compromised proxy from trusted list, and commits to reimburse all affected users.","source":""},{"date":"2024-01-23","event":"OKB token suffers a flash crash with a sudden, unexplained price drop, raising market manipulation concerns.","source":""},{"date":"2024-01-01","event":"Malta MFSA settles with OKCoin Europe for €304,000 fine; OKX agrees to hire independent compliance reviewer.","source":""},{"date":"2024-02-24","event":"OKcoin (OKX's U.S. arm) receives a CFTC subpoena related to suspected fraud and unlawful conduct in digital asset transactions.","source":""},{"date":"2025-01-01","event":"OKX receives a MiCA license from European regulators, allowing compliant operation across EU markets.","source":""},{"date":"2025-02-24","event":"OKX parent Aux Cayes FinTech Co. Ltd. pleads guilty and settles with U.S. DOJ for $504 million — $420.3 million forfeiture plus $84.4 million fine — for operating an unlicensed money-transmitting business and facilitating $5 billion+ in suspicious transactions. Three-year compliance monitor accepted.","source":""},{"date":"2025-03-17","event":"OKX suspends its DEX aggregator service after detecting Lazarus Group exploitation; Bybit CEO confirms approximately $100 million of the $1.5 billion Bybit hack was laundered through OKX Web3. European regulators (Austria, Croatia) open MiCA jurisdiction inquiry.","source":""},{"date":"2025-04-01","event":"Malta FIAU issues €1.1 million fine to OKCoin Europe for 'serious and systematic' AML breaches found during April 2023 on-site examination, including deficient customer risk assessments and inadequate methodology for high-risk asset categories.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 4b3ebd5d-d396-4070-a2fa-ac1fea22b5f0copy
2. #2reviewby reviewerreviewer

   2026-06-13 20:18:09Z
   Score: 28 → 28 (no score change)
   The page's major regulatory and incident claims are directionally accurate and supported by credible sources, including the DOJ settlement, Malta FIAU fine, Bybit hack laundering connection, and OKX DEX exploit. Key inaccuracies include: (1) the exploit loss amount uses PeckShield's $2.7M external estimate without noting OKX's lower confirmed figure of ~$370K-$430K; (2) the DOJ settlement's compliance requirement is described as a 'three-year compliance monitor' when it was actually a voluntary compliance consultant; (3) several timeline dates use placeholder values (Jan 1, Apr 1) rather than actual dates. All eight page sections have completely empty content, meaning the sourced URLs exist but the written analytical body of the page has not been generated.
   anchoranchored

   chain

   ●mainnet-betaslot 426,269,866

   sig

   3ckGXgjt1CAt…tT9RQqAncopyexplorer ↗

   hash

   8uvyDw5Vgt9E…4xFYvDmScopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1110 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-13T20:18:09.399Z","decision":"review","investigation_id":"ce84ec9f-aae8-4f31-8aec-4fb339bbc913","new_score":28,"page_slug":"okx-dex","prev_score":28,"reason":"The page's major regulatory and incident claims are directionally accurate and supported by credible sources, including the DOJ settlement, Malta FIAU fine, Bybit hack laundering connection, and OKX DEX exploit. Key inaccuracies include: (1) the exploit loss amount uses PeckShield's $2.7M external estimate without noting OKX's lower confirmed figure of ~$370K-$430K; (2) the DOJ settlement's compliance requirement is described as a 'three-year compliance monitor' when it was actually a voluntary compliance consultant; (3) several timeline dates use placeholder values (Jan 1, Apr 1) rather than actual dates. All eight page sections have completely empty content, meaning the sourced URLs exist but the written analytical body of the page has not been generated.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision abd38f33-cd5b-49be-9834-aa75ca48dde9copy
3. #3review reviseby judgejudge

   2026-06-13 20:18:09Z
   Score: 28 → 18 (-10)
   The review found zero formally disputed claims, but two high-priority structural problems require correction before the page can be approved. First, claim_findings[13] establishes that the page's description of a 'Three-year compliance monitor' in the DOJ settlement is inaccurate — OKX voluntarily retained a compliance consultant through February 2027; no court-ordered or government-appointed monitor was accepted. This distinction is material to assessing regulatory severity. Second, a high-priority coverage gap notes that all eight analytical page sections contain empty content, meaning the sourced evidence exists but the written body of the page has not been generated. Additionally, claim_findings[1] and claim_findings[7] present the PeckShield $2.7M exploit estimate as the page's sole figure without noting OKX's own confirmed loss of approximately $370K-$430K — a factual qualification readers should have. The major regulatory claims (DOJ settlement amount, Malta FIAU fine, Lazarus laundering, Bybit hack) are confirmed by credible sources including Tier 1 outlets.
   anchoranchored

   chain

   ●mainnet-betaslot 426,269,868

   sig

   4WNqPrktvzda…3vBDjVhzcopyexplorer ↗

   hash

   EfLVeFX2JF6j…uzRDgXRkcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1431 B) ▸

   {"actor":"judge","decided_at":"2026-06-13T20:18:09.399Z","decision":"review_revise","investigation_id":"ce84ec9f-aae8-4f31-8aec-4fb339bbc913","new_score":18,"page_slug":"okx-dex","prev_score":28,"reason":"The review found zero formally disputed claims, but two high-priority structural problems require correction before the page can be approved. First, claim_findings[13] establishes that the page's description of a 'Three-year compliance monitor' in the DOJ settlement is inaccurate — OKX voluntarily retained a compliance consultant through February 2027; no court-ordered or government-appointed monitor was accepted. This distinction is material to assessing regulatory severity. Second, a high-priority coverage gap notes that all eight analytical page sections contain empty content, meaning the sourced evidence exists but the written body of the page has not been generated. Additionally, claim_findings[1] and claim_findings[7] present the PeckShield $2.7M exploit estimate as the page's sole figure without noting OKX's own confirmed loss of approximately $370K-$430K — a factual qualification readers should have. The major regulatory claims (DOJ settlement amount, Malta FIAU fine, Lazarus laundering, Bybit hack) are confirmed by credible sources including Tier 1 outlets.","score_delta":-10,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 6490e9f9-2ec2-4426-98ef-351f6a763e58copy