WikiBit Exchange Exit Risk Ranking #45 — BingX: It Got a MiCA License and Hired a Former Ronaldo Teammate. Why Do Users Say, “They Freeze Your Account When You Start Making Money”?

Introduction: An Exchange With a “Compliant on Paper, Divisive in Reputation” Profile

In the first 44 editions, we investigated a series of exchanges ranging from HashKey to LBank. For the 45th edition, we turn to one of the most “split-personality” exchanges on the list — BingX.

On the “compliance + marketing” side, its résumé looks impressive: founded in 2018, more than 10 million users worldwide across 160+ countries, an Austrian FMA-issued MiCA license obtained in October 2026, ISO/IEC 27001 certification, PCI DSS 4.0.1 certification, monthly Merkle Tree Proof of Reserves, a BTC reserve ratio of 146.52%, full reimbursement to users after a $52 million hack in 2024, a leading position in copy trading, and even sponsorship of the Argentina national football team.

Sounds like a “rising compliance star + copy-trading king,” right？

But on the other side of the story, Trustpilot gives BingX just 1.5/5, with users complaining that their accounts were “frozen after making money,” that withdrawals required “prepayment,” and that they were asked to provide more documentation than they would normally provide to a bank.

WikiBit gives BingX a score of 6.73, while flagging an abnormal regulatory status for its Canadian FINTRAC registration (Regulatory No. M21935840), which is reportedly listed by the regulator as revoked.

Taiwan‘s National Police Agency has received 229 reports involving scam websites using the name “BingX.” Hudson Rock’s data-breach report indicated that 36,871 user credentials associated with the bingx.com domain were exposed. On July 22, 2026, BingXs hot wallet was attacked again, with CPO Vivien Lin confirming the incident in an early-morning post.

So how can an exchange with one of Europes toughest regulatory licenses — and a track record of fully compensating users after a major hack — still face complaints that it “freezes your account when you make money”？

Lets break it down layer by layer.

1. Regulatory Compliance: The MiCA License Is Real — But So Is the Question of Operating Beyond Its Scope

The “Full Compliance Package” BingX Promotes

BingXs compliance efforts in 2026 have certainly been substantial:

MiCA license issued by Austrias FMA: Announced on October 14, 2026, through BingX EU (MEGE zweite GmbH), allowing regulated services to be offered across 29 EEA countries.

PCI DSS 4.0.1 certification: Disclosed in July 2026, confirming compliance with international information-security standards.

ISO/IEC 27001 certification: Information security management system certification.

There is no question that a MiCA license carries significant regulatory weight.

Austrias FMA is considered one of the stricter regulators within the EU. Obtaining a MiCA license means BingX can legally provide regulated crypto-asset services across the European Economic Area under the applicable passporting framework.

That is a completely different level from exchanges that merely hold an MSB registration and use it as a “regulatory sticker.”

But Operating Beyond the Scope of a Registration Is Also a Serious Issue

WikiBit gives BingX a score of 6.73 and flags its Canadian FINTRAC registration (Regulatory No. M21935840) as having an abnormal status, reportedly listed by the regulator as revoked.

TradersUnion rates BingX 5/10, stating that the absence of Tier-1 regulation reduces its overall reliability and regulatory strength.

Put simply:

BingXs MiCA license is legitimate, but it only applies to the relevant EU/EEA regulatory framework.

In other markets — including the United States and parts of Asia — an MSB registration does not automatically authorize products such as futures, perpetual contracts, or leveraged derivatives.

This distinction matters because BingXs core offerings include perpetual contracts and copy trading.

So the regulatory picture looks less like “globally fully regulated” and more like:

Strongly regulated in one jurisdiction, while facing regulatory-scope questions in others.

That fragmented structure is an important part of BingXs compliance profile.

AUSTRAC Complaint in Australia

In July 2026, an investigative report disclosed that BingX was facing complaints involving AUSTRAC and alleged compliance issues.

Being registered to operate in Australia and being fully compliant with all applicable Australian AML/CTF obligations are two different things.

For users, the key takeaway is simple:

Registration ≠ comprehensive regulatory authorization.

Risk Rating: Medium — Regulatory Compliance

The MiCA license represents meaningful, hard regulatory oversight, and that should be acknowledged.

However, questions surrounding the scope of MSB registrations, combined with reported Australian regulatory complaints, create a fragmented compliance profile.

Overall assessment: EU-regulated, but with greater regulatory uncertainty in some other markets.

2. Account Security & Withdrawals: “They Freeze Your Account When You Make Money” Is the Dominant Complaint

Trustpilot gives BingX a 1.5/5 rating across 763 reviews, with 1-star reviews accounting for approximately 64%.

A large proportion of complaints relate to withdrawal problems and account restrictions.

One user claimed that after just three days of trading, approximately $300,000 was locked. According to the complaint, BingXs risk-control department repeatedly reset the 10-business-day review period without providing a substantive response.

The user wrote that their BingX account had been completely frozen after only three days of activity, leaving more than $300,000 inaccessible since July 14, 2026.

They said they had promptly cooperated with the platform and submitted all requested documents, including:

Passport/ID

Bank statements

Proof of source of funds

Deposit and withdrawal screenshots

Detailed explanations of trading activity

Other requested personal information

Despite this cooperation, the user claimed that there was no response after the platforms stated 10-business-day review period.

According to the complaint, every time the risk-control team requested another document — even something as simple as a screenshot — the 10-business-day countdown would effectively restart, followed by another period of silence.

The online support response was allegedly repetitive:

“Please contact rc@bingx and wait 10 business days.”

“They Freeze Your Account When You Make Money”

One widely circulated user review on WikiBit claimed that profitable users could eventually become subject to risk-control restrictions regardless of whether KYC had been completed.

The complaint alleged that, in the best-case scenario, users might recover their principal, while in the worst case, even the principal could become inaccessible.

Whether individual cases resulted from legitimate AML/KYC controls, abnormal trading activity, or improper account restrictions cannot be independently established from user reviews alone.

But the pattern itself is worth noting:

“Make money → account restricted” has become one of the most frequently repeated themes in BingX complaints.

“You Need to Pay a ‘Prepayment’ to Withdraw”

An investigative report published by investigations.org stated that Trustpilot and WikiFX contained numerous complaints alleging systematic fund retention, unexplained account restrictions, and prolonged withdrawal freezes.

These complaints are user allegations rather than independently established findings.

One particularly serious allegation involves users being asked to make a payment before being allowed to withdraw their funds.

In crypto communities, this type of demand is often described as a “pay-to-unlock” or “prepayment” scheme.

Similar allegations have appeared in complaints involving other exchanges, including KCEX, Biconomy, and LBank.

However, it is important to distinguish between:

A legitimate fee clearly disclosed in an exchange‘s terms and an unexplained demand for additional funds as a condition for releasing a user’s assets.

The latter would be a major red flag.

“My Account Was Locked for a Month”

Multiple complaints on Reclame Aqui reportedly describe BingX accounts being restricted, with both trading and withdrawals suspended without clear explanations.

One complaint alleged that the account had been restricted and withdrawals frozen for one month, with customer service reportedly telling the user that a PIX-related freeze would remain until February 16, 2026.

Again, these are individual user complaints and should not automatically be treated as proof of systemic misconduct.

But when similar complaints repeatedly involve the same pain point — withdrawals — the pattern deserves attention.

Taiwan Police: 229 Reports Involving Fake BingX Websites

Taiwans National Police Agency has reportedly received 229 reports involving scam websites using the BingX name, with the latest reported case dated December 17, 2025.

This does not mean BingX itself was responsible for these scams.

Rather, the issue is brand impersonation.

According to Taiwan authorities, scam groups used social-media and dating apps to persuade victims to download fake “BingX” applications and purchase USDT as an investment.

The problem is straightforward:

Ordinary users may not be able to distinguish the real BingX platform from a fake one.

When victims lose money, however, the name they remember — and potentially blame — is still “BingX.”

For a major exchange, widespread brand impersonation is therefore also a user-security and reputation risk.

The Core Pattern Behind the Complaints

Across the available user complaints, the alleged pattern can be summarized as follows:

Users deposit funds and trade normally.

Some users make profits.

When they request withdrawals, their accounts are allegedly frozen for “risk-control” reasons.

They are asked to complete additional KYC/AML reviews or, in some allegations, make a “prepayment.”

Customer service provides standardized responses.

Some users claim to have waited for weeks or months without resolution.

“Make money → account freeze” becomes a recurring theme in user complaints.

Again, complaints are not equivalent to verified evidence of wrongdoing. A crypto exchange is entitled to conduct KYC, AML, sanctions, fraud, and market-abuse reviews, and legitimate risk controls can delay withdrawals.

The real question is whether those controls are transparent, proportionate, consistently applied, and ultimately resolved within a reasonable timeframe.

Risk Rating: High — Account Security & Withdrawals

For users, the biggest concern is not simply whether an exchange can freeze an account.

It is how long the freeze lasts, what evidence is provided, whether the user can appeal, and whether the funds are ultimately released.

With withdrawal-related complaints appearing repeatedly across multiple platforms, this is currently one of BingXs most significant risk areas.

3. Reserve Transparency: A 146% BTC Reserve Ratio, but the “Snapshot” Tells a Different Story

PoR Data: Almost Textbook-Perfect

BingX has indeed done a relatively good job when it comes to reserve transparency. As of September 15, 2026:

BTC reserve ratio: 146.52%

ETH reserve ratio: 128.32%

USDT reserve ratio: 122.17%

USDC reserve ratio: 124.76%

BingX uses a Merkle Tree structure and publishes a PoR snapshot every month. Users can use the Merkle Tree Verifier Page to verify whether their assets are included in the platforms total reserves.

But Where Is the Problem？

First, PoR is a “snapshot,” not a continuous audit.

The 146% figure reflects the situation on September 15, 2026. But were the reserves still sufficient afterward？

There is no continuously published public data to answer that question.

BingX itself notes on its PoR page that the snapshot reflects reserve assets at a specific point in time and does not constitute a comprehensive audit of liabilities or overall solvency.

Second, the PoR only covers BTC, ETH, USDT, and USDC.

The reserve status of other assets remains largely a black box.

Third, PoR proves asset coverage — not willingness to process withdrawals.

Users who complain that their accounts were “frozen after making money” could theoretically still be fully covered by the platforms PoR report.

Their assets might be included in a reserve ratio of 146%.

But if the platform does not allow them to withdraw, that 146% does not solve their immediate problem.

Risk Rating: Medium-High

BingX performs relatively well in this area: Merkle Tree verification, monthly updates, and a 146% BTC reserve ratio are all positives.

But good PoR does not automatically mean your money can be withdrawn.

Those are two different things.

4. Asset Strength: Market Share Rose From 3% to 5% — But the “Data Leak” Raises Questions

The Impressive Numbers

Founded: 2018

Global users: 10 million+

Countries/regions covered: 160+

Perpetual futures market share: Increased from 3% in 2025 to 5% in 2026, ranking seventh

Q1 2026 perpetual futures trading volume: $52.479 billion

New perpetual contracts listed: 565, second only to MEXCs 879

On paper, BingX looks like a rapidly expanding exchange with considerable market strength.

But It Was Hit by Another Hot-Wallet Attack in July 2026

At around 4:00 a.m. on July 22, 2026, BingXs hot wallet was attacked again.

CPO Vivien Lin confirmed the incident on X, stating that the technical team had detected abnormal network access and suspected that BingXs hot wallet had been compromised. The platform immediately activated its emergency response procedures, including emergency asset transfers and temporarily suspending withdrawals. At that time, the platform said only a small amount of assets had been lost.

This was the second reported hot-wallet attack since BingX suffered a $52 million hack in September 2024.

The 2024 attack resulted in approximately $52 million in losses across multiple networks, including Ethereum, BNB Chain, Base, and Optimism. BingX subsequently introduced its “ShieldX” security suite.

But less than two years later, its hot wallet was reportedly attacked again.

That raises an obvious question:

If ShieldX was designed to strengthen the platforms security architecture, why was another hot-wallet attack still possible？

The incidents do not by themselves prove that BingX has a systemic security vulnerability, but they do show that the platforms security defenses have faced repeated real-world attacks.

Data Leak: 36,871 User Credentials Exposed

According to a Hudson Rock data-breach report, the bingx.com domain had 36,874 compromised credentials, including 36,871 user accounts and only three employee accounts.

The scale is significant.

If compromised credentials are valid and reused, attackers could potentially attempt unauthorized access to affected accounts, creating risks ranging from account takeover to potential asset theft.

That makes this more than a simple “security incident.”

For users, it represents a serious credential-security risk.

Risk Rating: High

BingX has significant user numbers, trading volume, and market presence.

But repeated hot-wallet attacks combined with a large reported credential exposure materially increase the platforms security risk profile.

5. Internal Operations & Team: CPO Vivien Lin Is the Public Face, While Founder Josh Lu Remains Difficult to Verify

Key Figures

The most visible senior figure at BingX is Vivien Lin, Chief Product Officer and head of BingX Labs.

Her background is relatively strong: she reportedly spent nearly a decade working at major financial institutions including Morgan Stanley, BNP Paribas, and Deutsche Bank before moving into crypto during the 2020 bear market.

During both the 2024 and 2026 security incidents, Vivien Lin was among the first BingX representatives to publicly address the situation on X.

That level of public visibility is a positive compared with exchanges whose senior management remains almost entirely anonymous.

Founder Transparency

Josh Lu is listed by Tracxn and Coinpedia as a co-founder of BingX.

However, his full name, LinkedIn profile, previous projects, and professional history are difficult to verify through publicly available information.

TradingFinder describes BingX as being “led by Josh Lu,” but provides limited additional background.

Team Transparency

CoinGeckos assessment gives BingX a team score of 0.5/10.

The assessment focuses on whether senior management profiles are publicly available and verifiable through credible sources.

A score of 0.5/10 suggests that BingX performs poorly on this particular transparency criterion.

For an exchange that has been operating for around eight years and claims more than 10 million users, the limited public information surrounding co-founder Josh Lu stands out.

It also contrasts sharply with exchanges where the identities and professional backgrounds of founders are extensively documented.

Risk Rating: Medium

Vivien Lin has a verifiable professional background and has publicly addressed major security incidents, which is a positive.

That said, the limited public information surrounding co-founder Josh Lu, combined with the low team-transparency score, leaves BingX with only moderate marks for management transparency.

Better than a completely anonymous team, but far from best-in-class transparency.

6. Product Experience & Trading Depth: Copy Trading Is the Highlight, but “Cant Withdraw” Remains the Core Concern

Product Offering

BingXs core competitive advantage is copy trading.

The platform offers:

Spot trading

Perpetual contracts with leverage of up to 125x

Copy trading

Grid trading

AI-powered trading

TradFi markets, including stocks, indices, commodities, and forex

In Q1 2026, BingX‘s TradFi trading volume reportedly peaked at 50% of the platform’s total trading volume.

That represents an important strategic shift.

BingX is gradually moving from a crypto-focused exchange toward a multi-asset trading platform.

But the Pain Points Are Serious

First, withdrawals remain the biggest problem.

“Account frozen after making money,” “prepayment required for withdrawals,” and “account locked for a month” are all potentially serious user-experience and trust issues.

Second, copy trading is a double-edged sword.

Copy trading is one of BingXs biggest selling points, but it also involves leverage and highly speculative strategies.

The risks can therefore be significantly higher than simply holding spot assets.

Some user complaints also allege that profitable trading activity is more likely to trigger risk-control reviews.

However, an account restriction following profitable trading does not necessarily mean the platform is targeting profitable users; legitimate AML, fraud-prevention, or market-abuse controls can also be triggered by unusual activity.

Third, KYC requirements can feel excessive.

Some Trustpilot users complain that they were required to provide more documentation than they would normally expect from a bank, yet their accounts remained restricted afterward.

For ordinary users, the problem is not necessarily that additional KYC is required.

The real issue is whether the requirements are clear, proportionate, and resolved within a reasonable timeframe.

Risk Rating: High

BingX offers a broad product lineup and has built a strong reputation in copy trading.

But for users, product variety means little if withdrawals become difficult.

When an exchanges biggest complaints consistently revolve around access to funds, withdrawal reliability becomes more important than how many products the platform offers.

7. Real Community Feedback: Extremely Polarized — Popular With Copy-Trading Traders, Heavily Criticized by Users Who Hit Reward or Risk-Control Problems

After reviewing the dominant discussions across Reddit, X/Twitter, Trustpilot, and major overseas crypto communities, the overall picture is highly polarized.

Positive Feedback — Short-Term Futures Traders & Copy-Trading Beginners

Common positive comments include:

The copy-trading system is easy to use, allowing beginners to follow experienced traders without conducting all the market research themselves.

Futures trading fees are relatively competitive.

Withdrawals for major cryptocurrencies are generally smooth under normal circumstances.

The app is relatively straightforward and easy to operate.

24/7 customer support is considered more convenient than platforms that rely primarily on email-based ticket systems.

Regular PoR disclosures and the platforms security fund provide an additional sense of security compared with smaller, lesser-known exchanges.

Negative Feedback — Users Who Encountered Problems & Long-Term Holders

Negative feedback tends to focus on several recurring themes:

Promotional campaigns: Rewards can look attractive in advertisements, but users complain that additional conditions or restrictions appear when they try to withdraw or claim the rewards.

Risk controls: Risk-control measures can reportedly be triggered suddenly. Once an account is flagged, users complain that reviews can take a long time, while customer service provides repetitive standardized responses.

Large number of altcoins: The platform lists many highly speculative tokens, some of which can lose most of their value shortly after launch, leaving users with limited avenues for recourse.

Regulatory concerns: Users who prioritize strict regulatory oversight may worry about how the platform would respond if regulators in different jurisdictions tighten restrictions.

Copy-trading risks: When copied traders lose money, users generally bear the trading losses themselves. There are also occasional complaints involving signal providers disappearing or engaging in aggressive or potentially abusive trading strategies.

The Community Profile in One Sentence

BingX is a popular choice among short-term futures traders and copy-trading enthusiasts, but it may be less suitable for conservative users who prioritize strong regulatory oversight, long-term large-value asset custody, and minimal promotional complexity.

Add an overall risk verdictSeparate evidence from interpretation

8. Comprehensive Exit Risk Assessment

Overall Rating: Medium-High Exit Risk

BingX is one of the most unusual cases in this series — a contradiction between a “new compliance star” and a “user nightmare.”

Its risk profile can be summarized as follows:

1. The MiCA License Is Real — But So Are the Questions About Operating Beyond Regulatory Scope

BingX EU obtained a MiCA license from Austrias FMA, representing a significant regulatory milestone in Europe.

But in other markets, its MSB registration has been flagged as operating beyond the permitted scope.

“EU-licensed, but running with greater regulatory uncertainty elsewhere” — that is the simplest way to describe BingXs regulatory profile.

2. “They Freeze Your Account When You Make Money” Is the Dominant User Complaint

This is not simply a complaint from one isolated user.

Trustpilot gives BingX a score of just 1.5/5, while Taiwans National Police Agency has reportedly received 229 reports involving scam websites using the BingX name.

The phrase “they freeze your account when you make money” has become one of the most frequently repeated themes in BingX-related complaints.

That said, user reviews are allegations and should not automatically be treated as proof that BingX systematically freezes profitable accounts.

3. Another Hacking Incident in July 2026

After suffering a $52 million hack in 2024, BingX launched its “ShieldX” security initiative.

Yet less than two years later, its hot wallet was reportedly attacked again in July 2026.

The fact that another attack occurred despite subsequent security upgrades raises questions about the resilience of BingXs security architecture.

4. 36,871 User Credentials Reportedly Exposed

According to a Hudson Rock report, 36,871 user-account credentials were reportedly exposed.

If such credentials remain valid, attackers could potentially use them to attempt unauthorized access to affected accounts.

For users, this represents a significant account-security concern.

5. A Co-Founder Who Is Difficult to Verify Publicly

CPO Vivien Lin has a publicly verifiable professional background, including experience at Morgan Stanley, and has appeared publicly during major security incidents.

By contrast, publicly verifiable information about co-founder Josh Lu, including his full professional background and previous projects, is extremely limited.

This creates a noticeable gap in management transparency.

This is not simply a question of whether BingX has a “high” exit risk.

The bigger question is:

How can an exchange hold a MiCA license while simultaneously facing repeated user complaints about account restrictions and withdrawals？

That contradiction is precisely what makes BingX worth watching.

9. Recommendations for New and Existing Users

For New Users

1. Enter with caution.

BingX is not a platform like UZX or Azbit that can simply be dismissed at first glance.

It has a MiCA license, publishes PoR data, and has built a strong position in copy trading.

But when you put together the complaints about “accounts being frozen after making money,” “prepayment required for withdrawals,” and the reported exposure of 36,871 user credentials, there are enough warning signs to justify caution.

The question is simple:

Are you really willing to take that risk？

2. If you insist on trying it, start small and test the entire process.

Test the complete cycle:

Deposit → Trade → Withdraw.

Pay particular attention to the withdrawal process.

Many of the most serious complaints allegedly emerge only when users attempt to withdraw funds.

3. If you are an EU user, understand what the MiCA license actually means.

The MiCA license provides a regulatory framework and certain protections within the applicable European regulatory regime.

But if you are located outside the EU/EEA, the regulatory protections applicable to you may be very different.

Do not assume that an EU MiCA license automatically provides the same level of protection everywhere.

4. Be skeptical of “get rich through copy trading” narratives.

Copy trading can involve leverage and highly speculative strategies, making the underlying risks substantial.

And if an account becomes subject to a risk-control review after generating profits, the key question is not simply “Can I make money？”

It is:

“Can I actually withdraw it？”

For Existing Users

1. Review your exposure immediately.

If more than 10% of your total assets are held on BingX, consider gradually reducing your exposure.

This does not mean BingX is going to collapse tomorrow.

The recommendation is based on the accumulation of three risk signals:

the July 2026 hacking incident + repeated user complaints about account restrictions after profits + the reported exposure of 36,871 credentials.

When multiple risk indicators accumulate, concentration risk becomes increasingly important.

2. Test a withdrawal now.

Make a small withdrawal.

If it works, that provides at least some evidence that your account is currently functioning normally.

If it does not, finding out now is better than discovering the problem after your entire portfolio is trapped.

3. If you cannot withdraw, do not pay for an “unlock.”

Be extremely cautious about requests for:

“Prepayment”

“Verification fees”

“Security deposits”

“Unlocking fees”

Do not assume that paying additional money will make your funds withdrawable.

4. Change your password.

If you have ever registered a BingX account and reused the same password on other platforms, change those passwords immediately.

The reported credential-exposure incident makes password reuse particularly dangerous.

Enable two-factor authentication (2FA) wherever possible.

5. Stop depositing more money.

This may be the simplest — and most important — piece of advice.

If you are already experiencing withdrawal or account-review problems, do not put additional funds into the account simply because customer service tells you to do so.

Final Recommendation

Who Is BingX Suitable For？

Potentially suitable for:

EU/EEA users operating under the applicable MiCA regulatory framework

Experienced users who understand the risks of derivatives and copy trading

Users who are comfortable with the platforms risk profile and keep their exposure appropriately limited

Who Is BingX Not Suitable For？

Less suitable for:

Users who require highly predictable and frictionless withdrawals

Conservative users holding large amounts of crypto for the long term

Users outside the EU/EEA who assume the MiCA license automatically protects them

Users who place a very high priority on management transparency and regulatory clarity

BingX occupies a very complicated position.

It is far stronger than platforms such as UZX or Azbit in terms of infrastructure, regulatory credentials, PoR disclosures, user base, and product depth.

It has a MiCA license.

It publishes PoR.

It claims more than 10 million users.

It has become a major player in copy trading.

But it still falls short of exchanges that have established a stronger “regulated and transparent” profile, such as HashKey or Bitvavo, particularly when considering reported MSB scope issues, WikiFXs regulatory assessment, withdrawal-related complaints, and the reported exposure of 36,871 user credentials.

BingX is essentially a “compliance newcomer” wearing a MiCA-license suit and carrying a PoR certificate.

But if you ask:

“Can I definitely withdraw my profits？”

The answer, based on the current body of user complaints, is:

That is the part you should verify for yourself before committing significant funds.

Coming Next

WikiBit Exchange Exit Risk Ranking #46 — Bitfinex

Stay tuned.

Risk Disclaimer: This article represents an independent analytical opinion and does not constitute investment advice. Cryptocurrency investments involve significant risks. Please exercise caution before entering the market.

The information in this article was updated on October 16, 2026. For the latest information, readers should independently verify key facts through multiple authoritative sources.

WikiBit, a regulatory app co-building protection with over 1 billion crypto investors. More crypto exchange real-time regulation info, please feel free check and download WikiBit App athttps://www.wikibit.com/

Apple Store: https://apps.apple.com/sg/app/wikibit-crypto-reg-check/id1541570520

Google Play: https://play.google.com/store/apps/details？id=com.wikifx.wikibitglobal