Users shift funds to OKX after Binance hack, Star Xu says OKX faces APT attacks every month

Users shift funds to OKX after Binance hack, Star Xu says OKX faces APT attacks every month

N
News Editor
2026-11-01 11:33:01
After Binance was hit by a hack involving about $6.3 billion, some users began spreading funds across other exchanges. On Nov. 1, OKX founder Star Xu responded on X to a user who said they had moved part of their holdings to OKX, saying the exchange detects and responds to a range of cyber threats every month, including advanced persistent threat, or APT, attacks targeting the crypto sector. Xu said OKX would also "seriously learn lessons" from recent security incidents affecting industry peers. The user said they entered the crypto market in 2023 and 2024 and had seen Bybit, Gate, Bitget and Binance all suffer hacks over the past three years. They said Binance’s latest incident hit hardest because about 80% of their assets were held there, and they had even consolidated funds from other exchanges into Binance eight hours before the theft. Xu added that OKX launched automated penetration testing based on large language models more than a year ago. Binance said later on Nov. 1 that it had resumed withdrawals for assets including BTC, USDT and USDC and had replenished about 95% of the affected amount.

After Binance was hit by a hack involving about $6.3 billion, some users started moving part of their funds to other exchanges. OKX founder Star Xu said on X on the evening of Nov. 1 that OKX detects and responds to various cyberattacks every month, including advanced persistent threat, or APT, attacks aimed at the crypto industry. He also said the exchange would "seriously learn lessons" from recent security incidents involving peers.

User says part of funds were moved from Binance to OKX

Xu was responding to a post from a Chinese-speaking user on X. The user said they entered the cryptocurrency market in 2023 and 2024, and that Bybit, Gate, Bitget and Binance had all suffered hacks during the past three years. They said the latest Binance incident was the most damaging for them because about 80% of their assets were held on Binance.

The user added that eight hours before the theft, they had still been moving funds from other exchanges into Binance. On Nov. 1, they said they decided to spread part of their holdings to OKX based on the idea of not putting all eggs in one basket, while also worrying that hackers could next target OKX, which they described as "the only one in the past two years that has not been hacked."

The post also called on OKX management to conduct closer reviews of hot wallets, permissions, the supply chain and internal processes. The user said that spreading positions and self-custodying part of one’s assets is the real form of risk management.

Star Xu says OKX started LLM-based automated penetration testing more than a year ago

Xu replied, "Thank you for the trust. OKX will not let you down." He said OKX has always treated security and the protection of customer assets as its "first lifeline." According to Xu, the exchange’s security framework, technical capabilities and operational experience built over the past 13 years have allowed it to keep running steadily under complex security threats.

He also said OKX launched automated penetration testing based on large language models, or LLMs, more than a year ago to improve the depth, breadth and efficiency of security testing.

Xu added that security "never has an endpoint" and that OKX cannot afford complacency because of past results. He said the exchange would strengthen internal reviews across the board in response to recent incidents at peer platforms and continue improving its security system. "Protecting customer assets is a bottom line OKX can never compromise on," he said.

Binance resumes some withdrawals

ABMedia said Binance had gradually resumed withdrawals for Bitcoin, USDT and USDC starting in the afternoon of Nov. 1, and said it had replenished about 95% of the affected amount. Progress on reopening withdrawals and compensation details were posted on the exchange’s incident center page.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
400

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.