SlowMist audit finds no private key leakage in OKX Wallet

cryptonews04-03

SlowMist finds no key leaks in OKX Web3 wallet, but BOM-style malware and compromised devices keep user-side security the weak link. Summary SlowMist says OKX Web3 Wallet does not transmit ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2624663810?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-04-03 22:00","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2624663810","market":"hk","top_or_hot":-1,"title":"SlowMist audit finds no private key leakage in OKX Wallet","media":"cryptonews","content":"<div>\n<p>SlowMist finds no key leaks in OKX Web3 wallet, but BOM-style malware and compromised devices keep user-side security the weak link.\n\n\nSummary\n\n\n\nSlowMist says OKX Web3 Wallet does not transmit ...</p>\n\n<a href=\"https://crypto.news/slowmist-audit-finds-no-private-key-leakage-in-okx-wallet/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>SlowMist audit finds no private key leakage in OKX Wallet</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSlowMist audit finds no private key leakage in OKX Wallet\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-03 22:00 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/slowmist-audit-finds-no-private-key-leakage-in-okx-wallet/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SlowMist finds no key leaks in OKX Web3 wallet, but BOM-style malware and compromised devices keep user-side security the weak link.\n\n\nSummary\n\n\n\nSlowMist says OKX Web3 Wallet does not transmit ...</p>\n\n<a href=\"https://crypto.news/slowmist-audit-finds-no-private-key-leakage-in-okx-wallet/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETH","symbol_name":"低成本以太坊ETF-Grayscale","start_time":0,"source_url":"https://crypto.news/slowmist-audit-finds-no-private-key-leakage-in-okx-wallet/","article_id":"2624663810","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/slowmist-audit-finds-no-private-key-leakage-in-okx-wallet/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2624663810","pubTimestamp":1775224800,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"SlowMist finds no key leaks in OKX Web3 wallet, but BOM-style malware and compromised devices keep user-side security the weak link.Core wallet credentials are processed locally, as OKX stresses its self-custody design amid rising malware attacks.SlowMist said its security team used a mix of automated tooling and manual reviews “from an attacker’s perspective” to probe OKX Wallet’s code and traffic, similar to the methodology it recently applied in a comprehensive audit of Binance Wallet announced by Binance on X in early February 2026. In that earlier review, SlowMist “conducted an in-depth security audit through manual analysis and automated tools,” with Binance saying the exercise aimed to “ensure the highest level of security” for users managing digital assets.The renewed scrutiny follows a joint investigation in February 2025, when SlowMist and OKX Web3 Security disclosed that a fake app called BOM had “secretly accessed users’ private keys and mnemonic phrases,” ultimately steali","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETH":"低成本以太坊ETF-Grayscale","STCE":"Schwab Crypto Thematic ETF","BK4601":"加密货币现货ETF"},"translate_title":"慢雾审计未发现OKX钱包私钥泄露","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"STCE":0.73,"ETH":1},"content_text":"SlowMist finds no key leaks in OKX Web3 wallet, but BOM-style malware and compromised devices keep user-side security the weak link.\n\n\nSummary\n\n\n\nSlowMist says OKX Web3 Wallet does not transmit private keys or mnemonics to external servers.\nCore wallet credentials are processed locally, as OKX stresses its self-custody design amid rising malware attacks.\nThe audit follows SlowMist’s February 2026 review of Binance Wallet and comes after BOM malware stole over $1.82 million from more than 13,000 wallets.\n\n\n\nBlockchain security firm SlowMist has issued a new assessment of OKX’s Web3 wallet, concluding that the audited version “shows no behavior transmitting private keys or mnemonic phrases to external servers,” with “no sensitive data leakage risk” identified in its analysis. According to OKX’s own security white paper, the wallet’s underlying system is designed so that “the user’s mnemonic and private key related information are all encrypted and stored locally on the user’s device,” reinforcing its self-custodial model. The findings arrive as wallet security concerns escalate across the industry, and just months after a malicious BOM app was found to have drained over $1.82 million from at least 13,000 crypto wallets by stealing users’ keys.\n\n🔍 SlowMist Security Assessment 📑After a dedicated security audit and wallet sensitive information detection, the #OKX Web3 @wallet has been verified to NOT transmit private keys or mnemonic phrases to any external servers. ✅ Detection content: Whether the app sends the… pic.twitter.com/qcHXkX1sYI— SlowMist (@SlowMist_Team) April 3, 2026\n\nSlowMist said its security team used a mix of automated tooling and manual reviews “from an attacker’s perspective” to probe OKX Wallet’s code and traffic, similar to the methodology it recently applied in a comprehensive audit of Binance Wallet announced by Binance on X in early February 2026. In that earlier review, SlowMist “conducted an in-depth security audit through manual analysis and automated tools,” with Binance saying the exercise aimed to “ensure the highest level of security” for users managing digital assets.\nOKX leans on self-custody and audits\nOKX founder and CEO Star Xu has repeatedly argued that recent wallet incidents stem from compromised user devices, not flaws in the OKX Web3 wallet itself. “The risk originates from compromised user devices rather than the OKX Web3 wallet,” Star said in March, emphasizing that private keys and passwords are “stored only on user devices,” making endpoint hygiene critical. OKX also notes its Web3 stack has been audited by firms including CertiK, Hacken and SlowMist and hardened through a bug bounty program, framing third‑party reviews as part of a layered defense strategy.\nThe renewed scrutiny follows a joint investigation in February 2025, when SlowMist and OKX Web3 Security disclosed that a fake app called BOM had “secretly accessed users’ private keys and mnemonic phrases,” ultimately stealing “over $1.82 million in crypto” from victims across Android and iOS. SlowMist tracked one primary hacker address siphoning funds from more than 13,000 wallets, moving assets such as Tether (USDT), Ethereum (ETH), Wrapped Bitcoin (WBTC) and Dogecoin (DOGE) across BNB Chain, Ethereum, Polygon, Arbitrum and Base. In a separate report, the firm warned that private key leaks, phishing and fraud schemes remained key weak points, after its MistTrack team logged 467 stolen fund cases and froze roughly $20.66 million in just one quarter.\nMalware risk keeps pressure on wallet security\nSlowMist has cautioned that even well‑designed wallets can become vulnerable when users install Trojanized apps or grant excessive permissions, allowing attackers to “scan and collect media files” and exfiltrate mnemonic phrases or key backups. OKX and SlowMist jointly urged users to avoid storing seed phrases via screenshots, photos or cloud services and instead rely on offline methods such as paper backups or hardware wallets.\nWithin this context, the latest OKX Wallet assessment is being framed as a trust signal rather than a guarantee, underscoring that infrastructure audits and self‑custody designs must still be paired with basic operational security on the user side. As SlowMist’s broader analysis shows, fake wallets, compromised devices and social engineering remain among the most efficient ways for attackers to turn even the strongest wallet architectures into exploitable weak links.\n\n\n\n\n\n                Read more:\n            \n\n                Google, Microsoft, backs x402 Foundation to standardize AI-driven crypto payments","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.40.0","shortVersion":"4.40.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2624663810","isCrawlerRequest":true}