Research institution: OKX security settings have vulnerabilities, users are advised to set up Google Authenticator

ChainCatcher news, according to reports from Wu, Dilation Effect previously conducted a quick analysis of the user security settings of OKX.

The results showed that although users had bound GA (Google Authenticator), the verification process allowed switching to a lower security level verification method, which led to the GA verification being bypassed. When OKX verifies sensitive user operations, such as adding whitelist addresses, withdrawing funds, and changing various verification settings, it can directly switch to a lower security level verification method, such as SMS. It is evident that OKX's security settings lack baseline design. Perhaps in an effort to enhance user experience, OKX has made significant compromises in security.

Dilation Effect reminds users to ensure that their account settings are bound to GA; otherwise, they may end up working for hackers, as email and SMS are easily attacked.