• OKX DEX aggregator is back online with real time abuse detection and new wallet tracking tools.

  • The platform now blocks hacker linked addresses and alerts users about risky transactions instantly.

  • OKX added wallet behavior labels like whale and sniper to help users identify high risk accounts.

OKX has resumed operations of its decentralized exchange (DEX) aggregator after a pause that lasted since March. The platform went offline to prevent further misuse linked to North Korea's Lazarus Group. The relaunch follows major security upgrades designed to block similar incidents.

https://twitter.com/star_okx/status/1919200062737179013 Real-Time Threat Detection Introduced

The new system includes a real-time abuse detection tool that blocks suspicious behavior instantly. OKX said the upgraded features allow better monitoring of malicious onchain activities. The platform now categorizes risky transactions and alerts users before they are processed.

Security enhancements include a dynamic address database that blocks known hacker-linked wallets. OKX reported that the system actively flags interactions from addresses with a history of fraud. Analysts say this approach increases transparency and reduces risk exposure for Web3 users.

DEX Aggregator Now Identifies Risky Wallets

One of the latest features classifies wallets by user behavior. OKX can now label wallets as potential whales or snipers. These identifiers help users assess market impact before trading with high-volume wallets. It also supports decision-making in volatile conditions.

The exchange also reaffirmed that its infrastructure has been tested through a bug bounty program. Multiple blockchain security firms, including CertiK, Hacken, and SlowMist, have verified the system. These measures aim to boost user trust in the aggregator's security framework.

Response to Past Exploit Still Ongoing

OKX paused the aggregator in mid-March after discovering that Lazarus Group exploited the system. The firm promised a complete review and implementation of security upgrades. At that time, they also began developing a new hacker tracking tool. That system now forms part of the security upgrade.

Meanwhile, regulatory attention has increased across the sector. In March, European Union authorities began investigating OKX’s wallet services. The probe followed claims of a connection to laundering funds from the $1.4 billion Bybit hack. OKX denied any custodial role in that incident and clarified that it only offered aggregation services.

Other Exchanges Affected by Same Hack

The Lazarus-linked hack continues to affect other exchanges. On May 1, crypto platform eXch shut down following reports it processed stolen assets. While eXch initially denied those claims, it later confirmed that some funds came from the February breach.

The OKX aggregator’s return marks a step forward in platform security amid growing cyber threats. The new upgrades aim to restore confidence among users and regulators alike.