In a recent post-mortem published on X, OKX, a prominent cryptocurrency exchange, confirmed that a hacker exploited forged "judicial documents" to access the personal information of a "very few" users. The exchange stated, “The matter is under investigation by the judicial authorities, and we cannot disclose more specific details.”

The security breach came to light over the weekend after two OKX users reported that their accounts had been compromised and drained. Blockchain security firm SlowMist highlighted the similarities between the two incidents, noting that a new API key was created following the users receiving risk notification SMS texts from Hong Kong for account verification.

Adding to the complexity, Web3 security group Dilation Effect suggested on Monday that the attackers exploited a security loophole in OKX's system. This alleged vulnerability purportedly allows users to disable Google Authentication or mobile phone verification without activating a 24-hour withdrawal halt, a security measure typically triggered by certain user activities.

OKX, however, refuted this claim in its post-mortem report. The exchange asserted, “This incident has nothing to do with the choice of Google Authenticator or SMS verification.”

Despite the breach, OKX reassured its community that it has compensated and will continue to compensate affected users. According to Wu Blockchain, the two users whose accounts were compromised have already received full compensation from the exchange.

OKX declined to provide further details when contacted by The Block, including the exact number of affected users and whether all victims have been fully compensated. The exchange remains committed to addressing the breach and ensuring the security of its users moving forward.