OKX to Relaunch DEX with Anti-Abuse Upgrades After Lazarus Misuse

Crypto exchange OKX has relaunched its decentralized exchange (DEX) aggregator, OKX Web3, after temporarily shutting it down in March due to misuse linked to the notorious North Korean hacking group, Lazarus. The platform is back online with a suite of new security enhancements designed to keep users safer.

In a May 4 post on X, OKX founder and CEO Star Xu confirmed the return of the DEX aggregator and introduced a key new feature: a real-time system that detects and blocks abusive activity as it happens. Xu described OKX Web3 as a kind of "browser and search engine for blockchain," offering users a more intuitive way to access decentralized finance (DeFi) markets.

For those unfamiliar, a DEX aggregator pulls in data from various decentralized exchanges and market makers, helping users find the best trading options in one place.

The upgrade also brings more advanced onchain monitoring. According to OKX, its systems can now better identify suspicious wallet activity — from fraud to hacking attempts — and even send proactive alerts about risky transactions."Our dynamic database of suspect addresses blocks hackers and bad actors in real time," the startup stated, adding that their infrastructure has been audited by renowned blockchain security organizations like CertiK, Hacken, and SlowMist.

Another improvement includes wallet profiling — the platform can now categorize users as potential whales or snipers based on their transaction behavior.

OKX first suspended its DEX aggregator on March 17, shortly after learning that it had been exploited by the Lazarus Group. The company promised to strengthen its security measures and develop a system that tracks and blocks new hacker addresses.

This move came amid broader scrutiny. A Bloomberg report on March 11 revealed that EU regulators were investigating OKX’s DEX aggregator and wallet services in connection with the $1.4 billion Bybit hack in February. OKX denied any wrongdoing, clarifying that its wallet is self-custodial and merely aggregates swaps, meaning it doesn't hold users' assets.

The Lazarus Group’s reach continues to impact other parts of the crypto industry. Just days ago, on May 1, another exchange called eXch shut down after facing allegations that it was used to launder funds from the same hack. While eXch initially denied involvement, it later admitted to having processed some of the stolen funds.