Is OKX Wallet safe to connect?
Self-custody wallet ยท Ethereum, Polygon, BNB Chain, 50+ blockchains (per OKX Learn). Checked 2026-10-27; every line links its source.
Worst case: OKX Wallet is self-custody: anyone who gets your seed phrase or private key (for example through a fake app, a fake Firefox add-on or a 'support' message) has full control and can empty the wallet. OKX doesn't store your phrase, can't recover it, and can't reverse transfers.
Safe setup in 3 steps
- Install only from web3.okx.com/download, which OKX calls the only official link: Chrome Web Store ID mcohilncbfahbmgdjkbpemcciiolgcge, and on iOS check the developer is 'OKX Technology Inc'. Avoid search ads, forwarded links and Firefox add-ons (OKX said it has none).
- Write your seed phrase on paper, keep it offline and never share it. OKX never asks for it, and never by email or SMS. Back it up before you update, reinstall or move to the new OKX Wallet app.
- Verify every signature before you confirm, use only trusted dapps and keep the wallet updated, as OKX's FAQ advises. Review your token approvals in the wallet's Approval tab, and report scams to safety@okx.com.
What it can do with your money
| Who holds the keys | You hold the keys 'OKX does not store your wallet password, seed phrase, or private key.' Your seed phrase or private key is 'the only credential that can be used to recover a wallet'; without a backup, 'the wallet and its assets cannot be recovered'. Older 'keyless' (MPC) wallets split the key into three shares (OKX server, your device, iCloud/Google Drive), any two of which sign; new keyless wallets can no longer be created since 2025-05-23, and the extension stopped supporting them on 2025-04-07 (https://www.okx.com/help/what-is-okx-keyless-wallet). source |
|---|---|
| Can funds be sent out to any address? | Yes. You sign every send yourself, to any address. OKX says it 'can't access, reset, or recover' your keys, and that users 'maintain full control of their funds even if the service is no longer accessible or their exchange account is frozen.' source |
| Swaps and third parties | OKX can't freeze coins at your address, but it can block its wallet software: it may 'suspend or terminate access to our wallet software service without notice' (for example for fraud or sanctions evasion), it blocks sanctioned regions, and 'Blacklisted wallet addresses can't use our Web3 Wallet software to make transactions' (lists from the FBI, UN, OFAC and chain-analytics partners). It also blocks sending to blacklisted addresses. Your seed phrase still works in another wallet. In-wallet swaps are routed to third-party DEXs and aggregators; OKX says it is not a party to the swap. source |
Official links
- Website:
web3.okx.com - App:
https://chromewebstore.google.com/detail/okx-wallet/mcohilncbfahbmgdjkbpemcciiolgcge - App:
https://apps.apple.com/app/id6743309484
Where we confirmed these
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2026-08-20 | Socket's threat research team found 40 confirmed malicious Firefox add-ons ('Offside Wallet Theft Factory') posing as OKX, Rabby, TronLink and other Web3 products to steal wallets; one counterfeit OKX wallet asked for only 'storage' and 'tabs' permissions (third-party report; Mozilla signing records date the campaign from March 9 to August 3). | No stolen amounts reported | source | |
| 2025-07-03 | Koi Security found 40+ fake wallet add-ons on the Firefox store impersonating OKX, MetaMask, Coinbase, Phantom, Trust Wallet and others, many with hundreds of fake five-star reviews (third-party report; extension IDs not given in the coverage). | No stolen amounts reported | source | |
| 2025-03-17 | OKX paused its DEX aggregator (the swap router used by OKX Wallet) after detecting 'a coordinated effort by Lazarus group to misuse our defi services', and paused new wallet creation in select markets. OKX said wallet services stayed available. | Swaps paused for upgrades; not a loss of user funds | source | |
| 2025-01-09 | OKX warned on X about a fake 'OKX Wallet' add-on on the Firefox store. OKX said it had released no Firefox add-on and asked Mozilla to remove it (add-on not named in the coverage). | OKX told anyone who used it to 'transfer the relevant wallet assets immediately' | source | |
| 2023-12-19 | CertiK found a critical remote-code-execution flaw in OKX's iOS app, which then held the OKX wallet. OKX said it came from a third-party service provider and fixed it in iOS v6.45.0. | Fixed in v6.45.0; OKX said no assets were lost | source | |
| 2023-12-12 | A deprecated OKX DEX contract was exploited for about $2.7M: the proxy was upgraded (SlowMist suspected a leaked admin key) and used to pull tokens from users who had approved the old TokenApprove contract. | ~$2.7M | OKX revoked the contract's permissions and said it 'will reimburse affected users'; we found no total paid | source |