Our commitment to security and asset protection

Following the Binance incident, we reviewed our systems, custody infrastructure and transaction controls and found no evidence of intrusion or impact to OKX.

Customer assets remain secure, and the platform continues to operate as normal. Assets are held 1:1 and kept separate from our own, with layers of control so that no single person, system or device can move them. We also hold dedicated reserves to cover losses in the event of a hot wallet compromise.

The vast majority of customer assets are held in air-gapped cold storage, with keys generated and kept offline. Hot wallets hold only the balance needed to process withdrawals, as that is the part an attacker would target. Nothing moves from cold to hot automatically: every top-up is initiated by people, from multiple physically separate vaults. Should a hot wallet ever be compromised, we maintain dedicated reserves designed to cover the loss.

Every withdrawal is screened against our compliance and risk controls before signing, and each signed transaction is checked against the original request before broadcast, so a tampered or spoofed withdrawal is stopped before funds leave. Any change to a withdrawal address needs additional authentication and maker-checker approval, so a compromised account or session cannot redirect funds alone. Amount and velocity limits and automated hot-wallet circuit breakers cap the amount and speed of transfers if activity looks unusual. Wallets use multi-signature or MPC, depending on the chain, so no individual or device can authorise a transaction alone.

We train staff and run phishing simulations, but we assume some attempts will eventually succeed. So a stolen password or device opens nothing on its own. Phishing-resistant MFA, maker-checker approval on every change and just-in-time access mean no one person can reach or alter our signing infrastructure alone.

Our security and risk teams monitor around the clock for suspicious transactions, high-risk onchain activity, indicators of compromise, and deepfake and impersonation attempts. We reconcile internal records with onchain balances throughout the day, and above set thresholds affected withdrawals freeze automatically. A freeze halts the signing infrastructure itself, including withdrawals and deposits.

After significant industry incidents, we test the reported attack path against our own safeguards and make targeted improvements to signing controls, hot-wallet exposure, supply-chain security and AI security. We trace and restrict risky addresses, and work with exchanges, stablecoin issuers, chain foundations and bridges to help freeze incident-related funds.

Our controls are tested through penetration testing, bug-bounty programmes and external audits, including ISO/IEC 27001, 27017 and 27018; SOC 1 Type II and SOC 2 Type II; and CCSS Level 2 certification for our hot and cold wallet custody system.

Our security team is highly skilled, with backgrounds spanning crypto and traditional finance, including capital markets, banking, payments and critical national infrastructure. That experience shapes our controls: built to the standard regulated institutions expect, and tested against the threats facing a crypto platform.

Security is never finished. We keep testing our defences and act on what we learn.