PANews reported on June 13 that Crypto LaLa, director of Singapore quantitative trading company QuantMatter, tweeted that QuantMatter's institutional account on the OKX exchange was hacked on May 30, with losses of up to $11.6 million. In just 25 minutes, the hacker converted the funds into BTC, ETH, USDC and USDT by adding multiple whitelist addresses and transferred them to on-chain addresses. Currently, the funds have not been moved. Unlike previous cases, the QuantMatter account set up an offline Google Authenticator, but it still failed to prevent the theft.
Crypto LaLa pointed out that the attack involved its main account and sub-accounts, and no email notifications were received during the process, and no two-factor authentication was triggered. Crypto LaLa said that it did not use the Google Chrome extension that caused the problem, indicating that the incident may affect any OKX user. OKX has not yet made a public response to the attack.