Star_OKX

13 years ago, OKX started as a crypto exchange. Today, we’re building for something much bigger. Crypto changed how value moves. AI will change how financial institutions operate. The internet connects everything. At OKX Now, I shared how we see the next generation of finance: more open, global, 24/7, intelligent, and increasingly onchain. The infrastructure is changing. The products are changing. The users are changing. Our job is simple: keep building ahead of that change. Still learning. Still building. 🚀

很抱歉给您带来了不便。我们理解，您可能是一位无辜受到此次事件波及的用户，我们也非常理解您的困扰和不满。 请大家暂时避免直接从 MEXC 向 OKX 转入资金。 OKX 对 FinCEN采取的特别措施，按照类似金融制裁的审慎标准进行风险管理。根据我们的合规风控措施，来自相关平台的资金可能会被冻结审查，相关账户也可能需要接受进一步调查。 尽管 FinCEN 提供了 30 天的过渡期，OKX 仍然选择提前大幅加强相关风控措施，而不是等到最后期限才采取行动。 保护用户利益、维护金融体系的安全与诚信，始终是 OKX 的最高优先事项。 感谢大家的理解与配合。

Sorry for the inconvenience. We understand that you may be an innocent user caught up in this situation, and we sympathize with your frustration. Please avoid transferring funds directly from MEXC to OKX. OKX treats FinCEN special measures with a level of caution similar to sanctions. Under our compliance controls, funds associated with affected platforms may be frozen, and related accounts may be subject to further investigation. Although FinCEN has provided a 30-day transition period, OKX has already significantly strengthened its controls rather than waiting until the deadline. Protecting our users and maintaining the integrity of the financial system remain our highest priorities. We appreciate your understanding and cooperation.

我来简单说一下。 这首先是一个非常基础的技术设计和账户安全问题。 在 OKX 品牌下，我们坚持一个基本原则： 不同站点之间，UID 要么在全局范围内保持唯一，要么就不允许用户仅凭 UID 进行跨站点内部转账。 原因很简单：UID 是账户标识。如果同一个品牌不同站点可能存在相同 UID，却又允许通过 UID 跨站点转账，就可能造成收款账户识别错误和资金误转风险。 千里之堤，溃于蚁穴。所有重大风险都是由很多个小缺陷积累而成。 很难理解，为什么这么简单的一个问题，会演变成简中 X Crypto 社区的一个热点。 更令人不解的是，居然还有那么多账号针对一位由于某平台缺陷导致资产损失的用户进行谩骂、人身攻击，同时替相关平台洗地。 究竟是什么样的企业文化和价值观，在背后推波助澜？

To all European crypto users navigating these changes: OKX Europe is here to serve you. 🇪🇺 We’re committed to providing a regulated platform with deep liquidity, competitive pricing, strong customer protection, and a comprehensive suite of trading and financial products. OKX Europe offers access to EUR on- and off-ramps, spot trading, crypto and equity X-Perps, tokenized stocks, staking, OKX Pay, OKX Card, and much more under the applicable MiCA, MiFID, and PI regulatory frameworks. Our Unified Trading Account also brings spot, margin, and derivatives together, improving capital efficiency and enabling more sophisticated trading strategies. One regulated platform. Global liquidity. More products. Better trading experiences. We’re here for the long term, and we’re ready to welcome you. 🇪🇺 Risk warning: Crypto is volatile. You can lose everything you invest in. OKX Europe Ltd, authorised by the MFSA.

首富嫉妒首富，所以又“黑”首富！

OKX花了多少钱雇了马斯克来当“水军”？ 有些公司自己热衷于豢养水军操纵舆论、带节奏，便以为别人也都在做同样的事。 自己习惯了这一套，就觉得全世界都跟自己一样，还把自己的脏水泼到别人身上。 除了所谓的“水军”，还有各种现实版的“吕布”。今天可以捅前义父一刀，明天就可能对现义父反戈一击。 OKX有什么观点从来都是直接表达，没时间也不屑于雇佣水军和吕布们！OKX的时间和资源都投入在提升自己的能力上。 历史总是惊人地相似。时间会褪去很多伪装，也终究会让人看清真相。

我真心不想在竞争对手遭遇危机的时候批评他们。我真正希望的是，我们能够与他们携手合作，共同提高安全标准，更好地保护整个加密行业。 但我不得不说，那位自称已经不再管理币安的“币圈首富”（你们真的相信吗？）最近接受的采访，实在让我感到恶心。 整场采访充斥着胡说八道和误导性言论。他似乎在淡化自身应承担的责任，甚至试图通过贬低传统银行的安全性，为自己的失败寻找借口。 在这样一场危机中，我们本应看到的是责任担当和行业领导力。但这场采访给人的感觉，却是在不断推卸责任、转移焦点。 这绝不是我们这个行业需要的领导力。 自从事件发生以来，这位“币圈首富”似乎就一直停不下来： 1. 社交媒体上最活跃的人之一。 在整场危机期间，他可以说是币安相关人士中在社交媒体上发声最多、最活跃的一个。 2. 还有时间和马斯克吵架。 在如此严重的安全危机期间，他居然还有精力与 Elon Musk（@elonmusk）争论 SpaceX 股票投资的问题。 3. 反复强调“只有2%的资金流出币安”。 仿佛这个数字就能回答大家对平台安全性的根本质疑。 4. 继续开展营销活动吸引用户存款。 即使危机仍在持续，吸引新资金流入的营销活动也没有停止。 5. 试图暗示传统银行的安全性更差。 一个自称专业的加密行业领导者，怎么能做出如此具有误导性的比较？传统银行与加密交易所面对的威胁模型、攻击面以及安全事故的后果，都存在根本性差异。脱离这些背景进行简单比较，是极其不负责任的。 6. 几乎每次发声，都似乎把一位怀孕的女性推到危机最前线。 而自己则反复加上同一句免责声明：“我已经不管理币安了。” 与此同时，整个加密行业却在为这场危机付出代价： 1. 比特币价格据报道从约81,000美元跌至75,000美元。 市场在动荡中遭受了明显冲击。 2. 数十亿美元的杠杆仓位遭到清算。 市场波动引发了大规模的强制平仓。 3. 整个加密行业的公信力可能再次受到重创。 传统资本市场、机构投资者以及全球监管机构，可能因此对整个行业的安全性和可信度产生更深的疑虑。 经历了这一切，他们所谓的“多层安全防御体系”，如今看起来越来越像一个笑话。 我们的行业需要的，不是更多的借口，不是更多的公关话术，而是真正的合作、真正的责任担当，以及切实有效的用户资产保护和安全标准建设。 少一些推卸责任，少一些营销包装，多一些真正的安全投入和行业协作。 这才是我更愿意投入时间和精力去推动的事情。 即使是竞争对手，我也真心希望我们能够携手把这件事做好。

I genuinely don’t want to criticize a competitor during their crisis. What I really want is for us to work together with them to raise security standards and better protect the entire crypto industry. But I have to say, the interview with the “richest man in crypto,” who claims he no longer runs Binance (do you really believe that?), made me sick. The interview was full of bullshits. It was misleading, appeared to downplay their own responsibilities, and attempted to discredit traditional banks to make excuses for their own failures. Instead of demonstrating accountability and leadership during a crisis, the interview seemed more focused on deflecting responsibility and shifting blame. This is not the kind of leadership our industry needs. Since the incident, the “richest man in crypto” seems unable to stop making noise: 1. He has arguably been the most vocal individual associated with Binance on social media throughout this crisis. 2. He has found time to argue with Elon Musk @elonmusk over SpaceX stock investments. 3. He keeps emphasizing that “only 2%” of funds have left Binance, as if that somehow addresses the underlying security concerns. 4. Marketing campaigns to attract new deposits have continued amid the crisis. 5. He has tried to suggest that traditional banks have weaker security. How can someone claiming to be a professional crypto industry leader make such a misleading comparison? The threat models, attack surfaces, and consequences are fundamentally different. Comparing the two without that context is irresponsible. 6. And almost every time he speaks, he appeared to leave a pregnant woman on the front line and adds the same disclaimer: “I don’t run Binance.” Meanwhile, the entire crypto industry is suffering the consequences: 1. Bitcoin reportedly fell from around $81,000 to $75,000 during the turmoil. 2. Billions of dollars in leveraged positions were liquidated amid the market disruption. 3. The incident has potentially damaged the credibility of the entire crypto industry in the eyes of traditional capital markets, institutional investors, and global regulators. And after all this, their so-called “multi-layer security defense” is looking increasingly like a joke. A friend sent me photos of Halloween costumes that they came across. I’m sharing them here. The satire speaks for itself. Our industry needs fewer excuses, less PR spin, and more genuine collaboration to protect users and strengthen security standards. That is what I would rather spend my time building together—even with our competitors.

不排除这个可能性！

很多包装和表演最后都被证明就是个草台班子！ 据报道，一起涉及 63亿美元 的安全事件，竟然始于一名员工落入虚假招聘面试陷阱，随后波及另外两名员工，内部 AI 工具也可能被卷入其中。这就是所谓的“多层纵深防御”？ 我不想对竞争对手的安全控制失效做过多揣测。 但我想提醒每一位加密行业用户：在加密行业，过度以营销为导向的企业文化，可能是极其危险的。 你可能在意的是多几个百分点的理财收益，或者一些营销活动的奖励。但黑客和诈骗分子盯上的，是你100%的本金。 在加密行业，安全、责任和合规，永远应该排在营销之前。 再高的收益、再诱人的活动奖励，都无法弥补本金损失带来的伤害。 选择那些真正把保护你的资产放在第一位，而不只是想方设法吸引你资产的平台。

A reported $6.3 billion incident allegedly began with a single employee falling for a fake job interview, then spread to two more employees, with internal AI tools potentially involved. So much for the so-called multi-layer defense. I don’t want to speculate about a competitor’s control failures. But I do want every crypto user to understand one thing: a marketing-driven culture can be extremely dangerous in the crypto industry. You may be attracted by a few extra percentage points of yield or some promotional bonuses. Hackers and fraudsters are after 100% of your principal. In crypto, security, responsibility, and compliance must always come before marketing. No amount of yield or promotional rewards can compensate for losing your original funds. Choose platforms that prioritize protecting your assets, not just attracting them.

Great to keep building with Mastercard. 🤝 Stablecoins are moving beyond trading and becoming part of everyday financial life. With OKX Card, we’re connecting digital assets to real-world payments—making spending as simple and seamless as using any traditional card, while rewarding users along the way. More to come. 🚀

看到这张漫画，我既感到自豪，也感受到巨大的压力。 我们从来不说 OKX 绝对安全，更不说我们能够免疫任何攻击。没有任何一家公司可以真正做到这一点。 但我可以负责任地说，OKX 始终把安全和保护客户资产作为第一生命线。 过去 13 年的安全记录，背后是十几年持续不断的技术投入、工程积累、安全体系建设、实战经验和严格的运营管理。 我们始终以专业、严肃的态度面对各种安全威胁，而不是把安全当成营销噱头。 在大家看不到的地方，OKX 建立了大量自主研发的安全技术、内部系统、策略、框架，以及持续进行的渗透测试和独立审计。出于安全原因，其中很多核心机制和技术细节无法公开。这些都是我们长期积累的安全能力，也在不断接受检验、挑战和升级。 有一件事情，我可以和大家分享：自从最近 Binance 发生安全事件以来，整个 OKX 团队同样非常忙碌，很多安全、技术和风控同事都在日夜奋战。 不是因为 OKX 遭到了攻击，而是因为任何一家大型交易所遭遇的安全事件，都是对整个行业的一次警示。 当一些人把友商遭遇安全事件当成推出营销活动、吸引流量、争夺市场份额的机会时，我们选择把精力放在另外一些事情上。 过去这段时间，我们的团队一直在围绕四个方面持续工作： 1. 实时追踪被盗资金流向。 以秒级延迟监控相关被盗资金的链上流转，持续识别可疑地址和交易，并采取必要措施，尽最大努力阻止被盗资金通过 OKX 交易所及 Web3 DEX 聚合器进行转移和洗钱。 2. 全面加强市场风险控制。 评估安全事件可能引发的市场风险，必要时进一步收紧相关风控措施，提前防范流动性冲击、连环清算和潜在的市场踩踏，尽最大努力避免风险扩散，保护用户和整个行业。 3. 深入分析攻击模式和潜在漏洞。 研究攻击者可能采用的技术手段、攻击路径和潜在漏洞，特别关注 Crypto 企业的软件开发供应链安全，以及 AI Coding Agent 和相关依赖组件可能引入的新型安全威胁。 4. 以友商的教训为镜子，重新审视我们自己的安全体系。 对内部控制、权限管理、钱包基础设施、安全架构等进行深入、系统性的检查和复盘，持续发现问题、挑战假设、完善防御体系。 我们绝不能因为过去没有发生过类似事件，就认为未来也不会发生。 安全从来不是一个可以宣布完成的项目，而是一项永无止境的责任。 它需要持续的投入、专业的技术、严格的执行，更需要始终保持谦卑、警惕和自我怀疑。 在友商遭遇攻击的时候，我们不选择通过高调营销来吸引眼球和流量，而是选择更加努力地工作，保护我们的客户，也尽自己最大的努力维护整个行业的安全和稳定。 商业竞争应该体现在更好的产品、技术和服务上。 但在安全面前，整个行业应该站在一起。 保护客户资产，是 OKX 永远不能妥协的第一责任。 感谢大家的信任。我们会始终保持敬畏，不敢有丝毫懈怠，更不会把大家的信任视为理所当然。

This cartoon makes me feel both proud and under tremendous pressure. I will never claim that OKX is absolutely safe or immune to attacks. No company can honestly make that promise. What I can say is that OKX has always treated security and the protection of customer assets as our highest priority. Our 13-year track record reflects more than a decade of continuous investment, engineering, operational discipline, and hard-earned experience. We take security threats seriously and professionally—not as a marketing opportunity. Behind the scenes, we have built extensive layers of proprietary technology, internal security systems, strategies, frameworks, penetration testing, and independent audits. Much of this infrastructure cannot be disclosed publicly for security reasons. But these capabilities are constantly being tested, challenged, and improved. Here’s something I can share: since the recent Binance security incident, the entire OKX team has been working just as hard and staying just as busy as the teams directly responding to the attack. Not because OKX was compromised. But because an attack on one major exchange is a warning to the entire industry. While some may see such moments as opportunities to launch promotional campaigns, generate traffic, or compete for market share, our priority has been different. Our teams have been working around the clock on four critical areas: 1. Tracking stolen funds in real time. Monitoring the movement of funds associated with the incident with second-level latency, identifying suspicious addresses and transactions, and taking available measures to prevent stolen funds from being laundered through OKX Exchange or our Web3 DEX aggregator. 2. Strengthening market risk controls. Assessing the potential market impact of the incident, tightening risk controls where necessary, and preparing for liquidity shocks or cascading liquidations that could threaten users and the broader market. 3. Analyzing emerging attack techniques. Studying the attack patterns, potential vulnerabilities, and methodologies involved, including threats to software development supply chains and the rapidly evolving security risks introduced by AI coding agents and their dependencies. 4. Challenging our own security assumptions. Using the lessons from this incident to conduct a fundamental review of our internal controls, access management, wallet infrastructure, and security architecture. We don’t assume that what protected us yesterday will necessarily protect us tomorrow. Security is never a finished project. It is a continuous responsibility that requires humility, vigilance, investment, and execution. We don’t choose to be the loudest when another company is under attack. We choose to work harder to protect our customers and strengthen the resilience of the entire industry. Competition should drive better products and services. Security should bring the industry together. Protecting customer assets is our first responsibility. And we will never take your trust for granted.

谢谢信任，OKX 一定不负所托。🙏 OKX 始终把安全和保护客户资产视为第一生命线。 事实上，OKX 每个月都会检测并应对各种各样的网络攻击，包括针对 Crypto 行业的高级持续性威胁（APT）攻击。正是过去 13 年持续积累的安全体系、技术能力和实战经验，让我们能够在复杂的安全威胁下始终保持平稳运行。 早在一年多以前，OKX 就启动了基于 LLM 的自动化渗透测试，持续提升安全测试的深度、广度和效率，进一步增强我们在 AI 时代的安全防御能力。 我们有信心，未来的 OKX 会更加安全。但我们也非常清楚，安全永远没有终点，更不能因为过去的成绩而产生任何侥幸心理。 对于近期友商遭遇的安全事件，我们一定会认真吸取经验教训，全面加强自查，持续完善安全体系，始终保持谦卑和警惕。 保护客户资产，是 OKX 永远不能妥协的底线。

腾EO👍

With OKX Card, our goal is to make spending crypto as seamless as using a traditional card—with zero annual fees, zero monthly fees, and no added OKX FX fees. More importantly, users stay in control of their assets. Great to see the feedback. We’ll keep building. 💳🚀

The recent security incidents involving Bybit, Bitget, and now Binance should serve as a wake-up call for every leader in the crypto industry. Security should never be an area of commercial competition. It is a shared responsibility to protect our customers and the entire industry. Over the past decade, major crypto exchanges have made significant progress in protecting private keys. We have seen relatively few incidents involving direct private key compromises in recent years. So far, we have not seen conclusive evidence that Binance’s hot wallet private key was leaked. The greater concern may lie in vulnerabilities in access controls and wallet management systems. Companies that have never experienced a major security incident should not assume they are inherently safer or immune to attacks. At OKX, we have built multiple layers of sophisticated security protection and maintained a strong security track record over the past decade. But we also recognize that no system is absolutely secure. We must remain humble, vigilant, and constantly challenge our own security assumptions. A major security breach at any exchange undermines trust in the entire crypto industry, ultimately hurting every company and every customer. I believe CEOs across the industry need to come together, just as we did during the Bitcoin fork crisis in 2017, to establish stronger industry-wide security standards and coordinated response mechanisms. For example, transfers and settlements between verified exchanges could be processed in real time, while large withdrawals to unknown or unverified addresses, as well as transactions granting smart contract permissions, should be subject to additional verification and appropriate security delays. Crucially, these safeguards should be enforced at the cryptographic signing layer, rather than relying solely on application-level controls. Even if an attacker compromises an exchange’s wallet management system, they should not be able to bypass these fundamental security restrictions. We should also establish industry-wide mechanisms for real-time security incident notifications, coordinated monitoring of suspicious funds, and rapid responses to potential attacks. Exchanges, stablecoin issuers, and other major industry participants should work together to enable the rapid, lawful temporary freezing of suspected stolen assets when necessary. We should also work together to accelerate the industry’s transition to quantum-resistant cryptography and strengthen our defenses against emerging AI-powered security threats. These are long-term challenges that no single company can solve alone, and they require coordinated research, shared standards, and collective action across the industry. Security is everyone’s responsibility. No company can protect the future of crypto alone.