# Is OKX safe? Check before you connect | TradingAgentStack

> OKX: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-24.

Canonical: https://tradingagentstack.com/check/okx/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. OKX

# Is OKX safe to connect?

Exchange · Multi-asset centralized exchange (spot, derivatives). Checked 2026-10-24; every line links its source.

**Worst case:** OKX holds your coins and its terms let it freeze, block or seize them without notice during a review or legal order; a leaked trade/withdraw key not bound to an IP stays usable until 14 days of inactivity.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Create bot keys with Read+Trade only and bind them to your server IP; never grant Withdraw to third-party tools

2. Keep the withdrawal allowlist to your own addresses, since API withdrawals can only go to saved addresses

3. Verify any OKX 'support' account or site with OKX's channel-verification tool before sharing anything

OKX also has a full listing with an Agent Risk Score [Agent risk 84% (partial, 5 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score): [OKX on TradingAgentStack](https://tradingagentstack.com/tool/okx/).

## What it can do with your money

| Who holds the keys | The exchange holds your funds Custodial exchange account (the OKX Wallet is a separate self-custody product). [source](https://www.okx.com/help/terms-of-service) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Withdrawals available; OKX may suspend withdrawals to resolve platform incidents (ToS §4.1). [source](https://www.okx.com/help/terms-of-service) |
| Can it hold or freeze your funds? | OKX ToS: may 'freeze/lock any Assets in your Account' on suspected violations, unauthorized access or unreconciled balances (§7.6); may 'block transactions or freeze your funds immediately without notice' for suspected prohibited activity (§3.2); may suspend, freeze or seize accounts under investigation, subpoena or levy (§7.7); may restrict services and later suspend/terminate if requested information isn't provided in a timely manner (§4.16); may freeze/transfer assets under authority orders (§8.2(e)); may terminate 'at any time and for any reason' (§7.8). After termination you get 30 days to supply a withdrawal address before assets may be liquidated (§7.9). No fixed review duration is stated. [source](https://www.okx.com/help/terms-of-service) |
| What a leaked API key can do | Permissions are Read, Trade and Withdraw. Keys not bound to an IP that have trade or withdrawal permission are automatically deleted after 14 days of inactivity; up to 20 IPs per key. API withdrawals only go to addresses added on the withdrawal page. Default permissions for new keys are not stated. [source](https://www.okx.com/help/api-faq) |
| Monero and Zcash | **XMR**: delisted (spot pairs removed 2024-01-05; no XMR-USDT spot or XMR-USDT-SWAP instrument in OKX's public API on 2026-10-24) **ZEC**: delisted 2024-01-05, relisted for spot (ZEC/USDT) on 2025-11-24; ZEC-USDT state 'live' in OKX public API on 2026-10-24 [source](https://www.okx.com/api/v5/public/instruments?instType=SPOT&instId=ZEC-USDT) **Regions**: Availability on OKX's EEA entity not checked [source](https://crypto.news/zcash-price-resistance-zone-okx-relisting-2025/) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `okx.com`

- X: `@okx`

Where we confirmed these
- https://www.coingecko.com/en/exchanges/okex (website okx.com, twitter.com/OKX)

- https://www.okx.com/help/how-to-query-unique-accounts (okx.com page metadata names @okx; OKX offers an official channel-verification tool at okx.com/en-us/support-center/channel-verification)

## Deadlines

- **2027-07-10**: EU AMLR (Regulation (EU) 2024/1624, Art. 79(1)) applies: crypto-asset service providers may not keep accounts that allow anonymisation or obfuscation of transactions, including through anonymity-enhancing coins (e.g. XMR, ZEC). Relevant if you use an EU/EEA-licensed entity of this service. [source](https://didit.me/blog/privacy-coins-no-kyc-swaps-rules-2026/)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2025-03-17 | OKX suspended its Web3 DEX aggregator after misuse by Lazarus Group to launder Bybit-hack proceeds |  | Service paused; not a loss of OKX customer balances | [source](https://www.theblock.co/post/346538/okx-suspends-dex-aggregator-following-lazarus-misuse-and-heightened-eu-scrutiny) |
| 2024-01-05 | OKX delisted XMR, ZEC and DASH spot pairs (announced 2023-12-29); withdrawals for these tokens suspended from 2024-03-05 (delisting) |  | Users had to withdraw before the suspension; ZEC later relisted 2025-11-24 | [source](https://www.theblock.co/amp/post/269613/okx-privacy-coins-delisting) |

## Check a link

Got a link, @handle or repo that claims to be OKX? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for OKX

We email you if we add an incident, a freeze report, a known fake or a deadline for OKX. Free; unsubscribe anytime.

## More checks: Exchanges
[Binance](https://tradingagentstack.com/check/binance/)[Bybit](https://tradingagentstack.com/check/bybit/)[Kraken](https://tradingagentstack.com/check/kraken/)[Coinbase Advanced](https://tradingagentstack.com/check/coinbase-advanced/)[Hyperliquid](https://tradingagentstack.com/check/hyperliquid/)[Bitget](https://tradingagentstack.com/check/bitget/)[Gemini](https://tradingagentstack.com/check/gemini/)[KuCoin](https://tradingagentstack.com/check/kucoin/)[MEXC](https://tradingagentstack.com/check/mexc/)[Gate](https://tradingagentstack.com/check/gate/)[HTX](https://tradingagentstack.com/check/htx/)[Crypto.com Exchange](https://tradingagentstack.com/check/crypto-com-exchange/)[BingX](https://tradingagentstack.com/check/bingx/)[Bitfinex](https://tradingagentstack.com/check/bitfinex/)[Bitvavo](https://tradingagentstack.com/check/bitvavo/)[Bitstamp](https://tradingagentstack.com/check/bitstamp/)[WhiteBIT](https://tradingagentstack.com/check/whitebit/)[Pionex](https://tradingagentstack.com/check/pionex/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)