Kraken Crypto Exchange Bug Exploited, $3M Withdrawn Amid Tension
The Essentials in Brief
A serious bug in the Kraken cryptocurrency exchange system allowed users to withdraw digital assets worth at least 3 million US dollars. This incident, uncovered by a security researcher, not only caused a stir but also strained the relationship between Kraken and the blockchain security company CertiK. CertiK feels threatened by Kraken’s demands to repay the stolen amounts.
How did the theft occur?
Kraken discovered a critical error in their system that allowed users to generate “free money” on their accounts by initiating deposits that were never completed. This error was exploited by a security researcher and his two acquaintances to withdraw nearly 3 million US dollars in digital assets from Kraken.
Kraken’s Reaction
After the incident came to light, Kraken assured that the assets of customers were never at risk, as the stolen funds came exclusively from Kraken’s reserves. Nicholas Percoco, Kraken’s Chief Security Officer, commented on X (formerly Twitter) about the incident and emphasized that they are demanding the “white-hat hackers” to return the stolen amounts.
CertiK in the Line of Fire
CertiK, which later identified itself as the security researcher who discovered the error, criticized the way Kraken handled the situation. The company publicly complained about Kraken’s demands to repay a “non-matching sum” of cryptocurrency in an “inappropriate time frame” without specifying concrete repair addresses. This reaction led to a public debate about the appropriate handling of such security gaps.
Our Assessment
This incident underscores the importance of a strong security infrastructure and effective crisis management within the cryptocurrency industry. While Kraken was striving to control the situation and ensure the security of customer funds, CertiK’s reaction raises questions about the responsibilities and expectations of security researchers. This case serves as a reminder that cooperation between crypto exchanges and security firms is crucial to maintaining user trust and securing the integrity of the crypto market.
Sources
– AMBCrypto
– X (formerly Twitter) posts by Nicholas Percoco and Lefteris Karapetsas
The 3 best crypto casinos
| Wagering requirements | 35x bonus |
| 35x free spins winnings | |
| Minimum deposit | €20 |
| Maximum bet | €5 |
| Bonus validity | 14 days for deposit bonus |
| 7 days for free spins |
- There is no maximum bonus amount.
- 10 Free Spins per day over ten (10) days on Gates of Olympus or Book of Ra Deluxe.
| Wagering requirements | 40x deposit + bonus |
| 40x free spins winnings | |
| Minimum deposit | 0.00034 BTC or equivalent |
| Maximum bet | 0.00003 BTC or equivalent |
| Bonus validity | 30 days to claim |
| 14 days to wager |
- Minimum deposit: 0.048 BCH • 0.0068 ETH • 0.26 LTC • 154 DOGE • 20 USDT • 40 XRP • 180 TRX • 48 ADA • 0.04 BNB • 20 BUSD • 20 USDC.
- Maximum bet per round: 0.005 BCH • 0.0007 ETH • 0.03 LTC • 15 DOGE • 2 USDT • 4 XRP • 19 TRX • 4.8 ADA • 0.004 BNB • 2 BUSD • 2 USDC.
- Free spins are credited on “Max Miner” by Gamebeat, 20/25 free spins per a day.
| Wagering requirements | 40x bonus |
| Minimum deposit | 0,1 mBTC |
| Maximum bet | $5 per spin |
| Bonus validity | 7 days to wager |
- There is no cap on winnings or withdrawals.
Advertising transparency