OKX SDK

CertiKCode version: not recorded (see the report)

Audit

CertiK reviewed OKX (OKX SDK) on 19 May 2024: 5 findings, 0 critical; 3 marked fixed, 2 open.

No open critical findings
Open the reportOpen OKX’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low203
LowFrontEnd use Insecure Cryptographic PrimitivesOpen

We found the cryptographic primitives used a custom random number generation implementation. It’s using the `Math.random()` JS function, which is cryptographically insecure. `okxwallet/app/scripts/controllers/keyrings/utils/random.js`

LowSDK uses crypto modules that are no longer activeOpen

The SDK uses multiple sources for the module importing within both the JS and Golang components of the SDK. The JS component (audit/src/index.ts) uses the `crypto-js` module, which is no longer under active development. The Golang components (audit/src/index.ts) use the `crypto-js` module, which is no longer under active development. It’s recommended to replace the import with the native `Crypto` library.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of OKX’s security record

OKX
Audits5 audits by 1 firmLast audit May 2024, by CertiK.
Critical findingsNo open critical findingsAcross the 5 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 12 Dec 2023Source: De.Fi incident database.
Open OKX’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us