Customer Complaints Senior Manager

OKX debuts Shield, protecting 150M customers with stronger crypto security. * Carrillo J.M. * Published: September 22, 2026 * 11:57 am * Updated: September 22, 2026 * 11:57 am Table of Contents * Launch Details: OKX unveiled OKX Shield, a security suite that combines account protections with coverage of up to $500,000 for eligible account takeover incidents. * Coverage Levels: Protection starts at $100,000, increases to $250,000 for qualifying VIP 1-3 users, and reaches $500,000 for eligible VIP 4+ customers. * Security Requirements: Users must opt in, enable specific security settings, and maintain ongoing account safeguards to qualify for protection. OKX has introduced a new customer protection initiative designed to strengthen account security for its global user base of more than 150 million customers. The company announced the launch of OKX Shield, an integrated security suite that combines enhanced account safeguards, visible protection status, and financial coverage for eligible users affected by unauthorized account takeovers. The program offers protection of up to $500,000 for qualifying customers who activate the required security measures and meet ongoing eligibility requirements. The launch comes as payment fraud continues to rise across Europe, with recent data from the European Banking Authority and European Central Bank showing $4.81 billion in fraud during 2024, up from $4 billion a year earlier. New security program includes financial protection. According to OKX, the new protection framework is designed to address account takeover fraud, a growing challenge across financial platforms. Under OKX Shield, eligible customers can be reimbursed if an unauthorized third party gains control of their account and transfers assets. Protection begins at up to $100,000 for customers who enable the required security settings. Coverage increases to $250,000 for qualifying VIP 1-3 users and reaches $500,000 for eligible VIP4+ customers. The company stated there are no subscription or activation fees associated with the program. Qualifying incidents may include account compromises linked to credential phishing, malware, or SIM swap attacks, provided the unauthorized party takes control of the account and initiates the transfer. Raising standards for digital asset platforms. Speaking about the launch, OKX Europe CEO Erald Ghoos said the company is providing customers with stronger account protection and a financial safety net at no additional charge. He noted that digital asset platforms are increasingly being used for activities traditionally associated with banks and brokers, including holding assets, transferring value, making payments, investing, and accessing markets. The executive added that OKX believes customer protection standards should continue evolving as adoption grows and said the initiative reflects a greater commitment to user security across the industry. Activation requirements and existing safeguards. To participate in OKX Shield, customers must opt in and adopt recommended security settings. These include enabling a passkey, using facial verification for large withdrawals, and disabling web withdrawals. Users must also maintain ongoing account and device security requirements. The new service adds another layer of protection alongside existing measures maintained by OKX, including segregated customer funds, 1:1 reserves, and monthly Proof of Reserves reports that allow customers to verify eligible balances.

Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT. * September 22, 2026 * Posted by: admin * Category: BitCoin, Blockchain, Cryptocurrency, Investments Fomopeek, a malicious iPhone app distributed through Apple's App Store, has been linked to nearly $580,000 in stolen USDT. Blockchain security firm SlowMist began investigating the app over the weekend after receiving reports of stolen assets linked to exposed private keys. Some victims had previously installed versions 1.1 or 1.2 of the Fomopeek app, which was marketed as a read-only tool for tracking large cryptocurrency transactions across Ethereum, Solana and Tron. What is Fomopeek? Working with security researchers at crypto exchange OKX, SlowMist found two modules embedded in those versions that had no connection to FomoPeek's advertised monitoring functions. One communicated with external command-and-control infrastructure, while the other contained a kernel exploitation framework with eight attack methods that could adjust to the victim's iPhone model and operating-system version. A successful exploit could escape Apple's application sandbox and reach Keychain information and files belonging to other apps. That created a route to locally stored private keys, seed phrases, and login credentials without requiring users to connect a wallet or enter those details into FomoPeek. SlowMist founder Yu Xian said the risk extended to passwords stored in Apple's Keychain and encrypted files held by other applications. An attacker who obtained both could potentially unlock wallet credentials and other sensitive information stored on the device. "After a successful attack, the app can break through the iOS sandbox isolation mechanism, then read and decrypt the system keychain (Keychain), and access data files from other apps on the device. Private keys, mnemonic phrases, login credentials, chat histories, files, and other user data stored on the device may all face the risk of leakage as a result. Additionally, the app connects to covert servers unrelated to its public business functions to receive remote instructions." The malicious components were not present in FomoPeek's original release. SlowMist found them in version 1.1, released Sept. 9, and version 1.2 on Sept. 12, before removing them in version 1.3 on Sept. 17. Researchers also found that the framework could receive instructions from a remote server, including settings that governed whether exploitation was enabled and how often it would run. Nearly $580,000 stolen. The technical findings were followed by an on-chain trail showing that attackers had already converted that access into losses. Blockchain analysis firm Salus identified 0x6d37f2C5e8F8546b648D317295565dA95975f4BB as the attacker address and estimated proceeds from the incident at about 579,900 USDT. Salus traced 401,028 USDT through three intermediary addresses to FixedFloat. Another 20,000 USDT moved in two transactions through deposit addresses before being consolidated into a KuCoin hot wallet. A further 111,458 USDT was routed through an address Salus associated with an escrow platform, while another 10,000 USDT passed through the CCE mixing service before reaching addresses linked to an escrow service. Salus said its analysis also indicated that the group behind the FomoPeek incident had been involved in a separate private-key theft in June. Investigators are still determining whether the same technique was used in that attack. Crypto platforms warn users as custody debate returns. The losses and the potential reach of the exploit have prompted warnings from several crypto platforms, including Binance, OKX, Gate, Bitget Wallet and Rabby. "The third-party app FomoPeek (versions 1.1-1.2) contains malicious code that can exploit iOS system vulnerabilities to gain the highest level of device privileges, potentially accessing sensitive data stored on the device, including private keys, seed phrases, login credentials, chat history, files, and more. Please note that this type of malware targets the device itself. If an attack succeeds, data from all apps on the affected device may be accessed." In light of this, the crypto firms have broadly issued the same guidance, urging crypto users to remove FomoPeek, update iOS, and move assets to newly created wallets on devices where the compromised app was never installed. These fresh credentials are necessary because deleting the app or patching the operating system cannot invalidate a private key that may already have been copied. Meanwhile, the incident also comes two months after on-chain investigator ZachXBT argued that a separate iPhone dedicated to crypto could be preferable to existing hardware wallets for storing funds and signing transactions. His recommendation relied on keeping the device isolated from everyday browsing, messaging, and other activity that could expand the attack surface. FomoPeek exposes a different weakness in that model. The app was itself built for crypto users and distributed through Apple's official marketplace, yet researchers say it contained tooling capable of breaching the barriers separating applications on the device. That does not establish that dedicated crypto iPhones are inherently less secure than hardware wallets. However, it shows that isolation offers limited protection if software installed on the device can compromise the operating system itself. For affected users, the immediate focus is now on containing further losses and tracing the stolen funds. Salus continues to follow addresses linked to the remaining proceeds, while Binance and other platforms monitor for deposits that could give investigators another opportunity to track or restrict the movement of the stolen USDT.

OKX says RWAs now top crypto perpetual futures. September 17, 2026 CrowdFundInsider general Positive OKX, in partnership with data platform Token Terminal, has released a landmark report revealing that real-world asset futures have surpassed crypto perpetual futures in onchain trading volume, marking a structural shift in how decentralized markets are being used. The report shows that onchain perpetual futures markets for traditional assets - including tokenized equities, commodities, and other RWAs - are now generating activity comparable to or exceeding legacy crypto betting markets, a milestone that underscores the accelerating momentum behind RWA tokenization. This development matters now because institutional and retail investors are increasingly searching for real-world asset crypto exposure, tokenized asset trading platforms, and DeFi perpetual futures as bridges between traditional finance and blockchain-native markets. The OKX and Token Terminal findings arrive as protocols like Maple Finance, Ondo Finance, and others compete aggressively for RWA market share, and as total value locked in RWA protocols has surged into the billions of dollars in 2025. For traders watching crypto market structure trends, this volume crossover signals that onchain finance is maturing well beyond speculative crypto-native instruments. Watch for major exchanges and DeFi protocols to accelerate RWA perpetuals product launches in response to this data, and for OKX to potentially expand its own RWA trading infrastructure off the back of this report. OKX released a report, in partnership with Token Terminal, stating that RWAs [real-world assets] futures have surpassed crypto futures in trading volume. In brief, onchain perpetual futures markets for traditional assets have become as busy as onchain betting markets for crypto.