CertiK Audit Reports
OKX Wallet, Frontend & SDK Modules Audit Report (May 2024)
OKX Wallet received a clean security rating from CertiK, with all identified risks remediated. Key details:
Audit Scope
- Mobile Apps (iOS/Android): Wallet creation/import, password management, cloud backup
- Frontend: ReactJS UI components and JS controllers for keyring interaction
- SDK Modules: Bitcoin SDK, okwallet-core, and other core components
Methodology
- Static code analysis
- Manual code review
Findings
✅ 3 low-risk items
✅ 2 improvement suggestions
🔒 All issues resolved
👉 View full CertiK audit report
Threshold-lid Module Audit (October 2023)
OKX Web3 Wallet's threshold-lid implementation passed CertiK's security assessment.
Scope: Smart contract functionality verification
👉 Access complete audit documentation
Core Contract Audit (May 2023)
Primary OKX Wallet contracts achieved CertiK's security approval with:
- Critical vulnerabilities fixed
- Acknowledged low-risk items & optimization suggestions
Solana NFT Marketplace Audit (July 2022)
CertiK verified security of OKX's Solana NFT trading system:
- 10 findings (1 critical - fixed)
- 5 low-risk + 4 suggestions addressed
SlowMist Audit Reports
AA Smart Contract Account (June 2023)
Account Abstraction module cleared all security checks with:
- Zero outstanding risks
- Third-party validation
👉 Explore SlowMist's technical analysis
MPC Wallet Audits (May 2023)
Android & iOS versions both received SlowMist certification for:
- Private key security protocols
- End-to-end encryption compliance
Ordinals Trading Module (May 2023)
Bitcoin Ordinals transaction system passed independent security verification.
Private Key Security Audit (October 2022)
Key verification results:
- Keys/mnemonic phrases only stored locally
- Zero external transmission vulnerabilities
FAQ
Q: How frequently does OKX Wallet undergo audits?
A: We conduct regular third-party audits with every major update - typically quarterly.
Q: Where can I verify audit authenticity?
A: All reports are publicly accessible via CertiK/SlowMist platforms and our official docs.
Q: What happens if vulnerabilities are found?
A: Immediate patches are deployed, often within 24-72 hours of identification.
Q: Does CertiK audit wallet infrastructure?
A: Yes, including backend systems, SDKs, and smart contract layers.
Q: Are my assets insured if security fails?
A: OKX maintains a $200M protection fund covering extraordinary events.
Q: How does SlowMist verify iOS security?
A: Through static/dynamic analysis of compiled binaries and sandbox testing.