Verify a decision

{"actor":"system:backfill","investigation_id":"ce84ec9f-aae8-4f31-8aec-4fb339bbc913","kind":"publish","page_slug":"okx-dex","published_at":"2026-05-27T18:12:39.286Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"OKX DEX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/267405/okx-dex-suffers-apparent-2-7-million-exploit-following-suspected-private-key-leak","type":"other","url":""},{"credibility":3,"name":"https://olympixai.medium.com/unmasking-the-malicious-okx-dex-upgrade-f6912449f963","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=okx-dex-hack","type":"other","url":""},{"credibility":3,"name":"https://www.banklesstimes.com/news/2023/12/13/okx-hacked-for-dollar27m-after-proxy-admin-private-key-is-leaked/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2023/12/13/okx-dex-hacked-and-suffers-loss-424k-after-a-security-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/02/24/okx-close-to-large-settlement-agreement-with-u-s-regulators-source","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/okx-pleads-guilty-to-illegally-operating-in-the-us-pays-505-million/","type":"other","url":""},{"credibility":3,"name":"https://www.fintechfutures.com/regulations-compliance/okx-resolves-us-doj-investigation-agrees-to-pay-around-504m-in-penalties","type":"other","url":""},{"credibility":3,"name":"https://www.pymnts.com/aml/2025/okx-crypto-exchange-fined-500-million-for-anti-money-laundering-violations/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/okx-enters-the-united-states-market-following-505-m-settlement","type":"other","url":""},{"credibility":3,"name":"https://constantinecannon.com/whistleblower/whistleblower-insider-blog/not-ok-cryptocurrency-exchange-platform-okx-violated-u-s-anti-money-laundering-laws-and-will-pay-504m-in-penalties/","type":"other","url":""},{"credibility":3,"name":"https://www.sanctions.io/blog/okxs-500-million-penalty-key-takeaways-for-aml-pros","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/346538/okx-suspends-dex-aggregator-following-lazarus-misuse-and-heightened-eu-scrutiny","type":"other","url":""},{"credibility":3,"name":"https://www.dlnews.com/articles/regulation/okx-swept-up-in-bybit-hack-after-thieves-launder-100m-on-its-web3-platform/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/okx-suspends-dex-aggregator-further-misuse-lazarus","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/okx-suspends-web3-aggregator-amid-probe-into-100m-bybit-hack-laundering-links/","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/crypto-okx-shuts-down-exchange","type":"other","url":""},{"credibility":3,"name":"https://www.fintechweekly.com/magazine/articles/okx-halts-dex-services-following-lazarus-group-exploitation","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/malta-issues-12-million-fine-to-okx-for-past-aml-failures-amid-mica-license/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/malta-fines-okx-crypto-exchange-1-2-million-aml-breaches","type":"other","url":""},{"credibility":3,"name":"https://bitcoinist.com/okx-fined-1-2-million-malta-anti-money-laundering/","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/crypto/okx-fined-1-2m-malta-violating-aml-regulations-500m-penalty/","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/crypto-exchange-okx-pays-304000-fine-in-malta-for-compliance-failures/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://olympixai.medium.com/unmasking-the-malicious-okx-dex-upgrade-f6912449f963","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/2838/okx-dex-proxy-admin-owner-s-private-key-exposed","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-okx-exploit-3fb7d826a621","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/okx-delays-onchain-perps-launch-over-regulatory-concerns","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/02/24/okx-close-to-large-settlement-agreement-with-u-s-regulators-source","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto.news/exchanges-face-heat-as-okx-funds-zachxbt-probe-into-95-rave-crash/","type":"other","url":""},{"credibility":3,"name":"https://ourcryptotalk.com/news/dsjex-bg-wealth-sharing-ponzi-collapse-zachxbt-freezes","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=okx-dex-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/analysis/is-okx-safe","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/malta-issues-12-million-fine-to-okx-for-past-aml-failures-amid-mica-license/","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/cryptocurrency/okx-pleads-guilty-to-illegally-operating-in-the-us-pays-505-million/","type":"other","url":""}]}],"sources_used":[],"summary":"OKX DEX is the decentralized exchange aggregator operated by OKX (Aux Cayes FinTech Co. Ltd.), one of the world's largest centralized crypto exchanges. In December 2023, the DEX suffered a ~$2.7 million exploit caused by a suspected private key leak and a centralized proxy upgrade mechanism with no multi-signature protection. The broader OKX entity has faced severe regulatory sanctions including a $504 million U.S. DOJ settlement in February 2025 for operating an unlicensed money-transmitting business and facilitating over $5 billion in suspicious transactions, a €1.1 million Malta AML fine, and repeated scrutiny over its DEX aggregator being used by North Korea's Lazarus Group to launder stolen funds from the $1.5 billion Bybit hack in early 2025.","timeline":[{"date":"2023-12-12","event":"OKX DEX proxy admin private key allegedly leaked; attacker upgrades DEX Proxy contract to malicious implementation and begins draining user-approved token balances via claimTokens function. Approximately $2.7 million stolen across multiple wallets.","source":""},{"date":"2023-12-12","event":"OKX publicly acknowledges exploit, describes affected contract as an 'abandoned market maker contract,' removes compromised proxy from trusted list, and commits to reimburse all affected users.","source":""},{"date":"2024-01-23","event":"OKB token suffers a flash crash with a sudden, unexplained price drop, raising market manipulation concerns.","source":""},{"date":"2024-01-01","event":"Malta MFSA settles with OKCoin Europe for €304,000 fine; OKX agrees to hire independent compliance reviewer.","source":""},{"date":"2024-02-24","event":"OKcoin (OKX's U.S. arm) receives a CFTC subpoena related to suspected fraud and unlawful conduct in digital asset transactions.","source":""},{"date":"2025-01-01","event":"OKX receives a MiCA license from European regulators, allowing compliant operation across EU markets.","source":""},{"date":"2025-02-24","event":"OKX parent Aux Cayes FinTech Co. Ltd. pleads guilty and settles with U.S. DOJ for $504 million — $420.3 million forfeiture plus $84.4 million fine — for operating an unlicensed money-transmitting business and facilitating $5 billion+ in suspicious transactions. Three-year compliance monitor accepted.","source":""},{"date":"2025-03-17","event":"OKX suspends its DEX aggregator service after detecting Lazarus Group exploitation; Bybit CEO confirms approximately $100 million of the $1.5 billion Bybit hack was laundered through OKX Web3. European regulators (Austria, Croatia) open MiCA jurisdiction inquiry.","source":""},{"date":"2025-04-01","event":"Malta FIAU issues €1.1 million fine to OKCoin Europe for 'serious and systematic' AML breaches found during April 2023 on-site examination, including deficient customer risk assessments and inadequate methodology for high-risk asset categories.","source":""}]},"v":1}