CertiK has identified the Kraken exploit, which claims the exchange ‘intimidated’ the team.
Blockchain security firm Certike has gone public, identifying itself as a “security researcher” and claiming that Kraken stole $3 million worth of digital assets.
In a June 19 X post, Certike said he was informed of an exploit that allowed Kraken to withdraw millions of dollars from the currency's accounts. Kraken's head of security, Nicolas Percoco, claimed that an unnamed security group – not identified at the time as CertiK – had committed “extortion” by refusing to return any funds – unless they disclosed it until an agreement was reached to provide $$ for a bug that could potentially cause it.
“After successful changes in identifying and remediating the vulnerability, Kraken's security operations team threatened to charge a disproportionate amount of crypto at an inappropriate time without even providing a payment address,” it said. “In the spirit of transparency and our commitment to the Web3 community, we go public to protect the security of all users. We care.” [Kraken] To stop any threat from white hat hackers.
The security firm laid out a timeline of events, identifying the exploit on June 5 and claiming that Kraken threatened a Certike employee on June 18. In a statement to Cointelegraph, Certike said it plans to transfer the funds to a Kraken account. He can reach.”
Related: Crypto Phishing Attacks Reach ‘Exciting Levels' – CertiK Co-Founder
The initial reaction of many crypto users seems to be in favor of Kraken, saying that CertK's actions are not the same as white hat hackers. It's unclear whether Kraken has grounds to pursue legal action.
CertiK reported in April that By 2023, digital assets lost due to illegal activities were nearly $1 billion. The firm previously identified vulnerabilities in Wormhole Bridge in Aptos and Telegram apps.
Magazine: Crypto Audits and Bug Bonuses Are Broken: Here's How to Fix It
