According to Asia-focused journalist Colin Wu, citing blockchain security company SlowMist, the security breach at OKX occurred due to SIM hijacking. This type of fraud involves attackers manipulating a carrier to transfer a target’s cell phone number to themselves. By doing so, they are able to intercept the target’s calls or text messages needed for two-factor authentication on their online accounts.