Security

Blockchain security firm CertiK has gone public, identifying itself as the “security researcher” that cryptocurrency exchange Kraken claimed stole $3 million worth of digital assets.
In a June 19 X post, CertiK <a href="https://x.com/CertiK/status/1803450205389402215" target="_blank" rel="noopener nofollow">said</a> it had informed Kraken of an exploit that allowed it to remove millions of dollars from the exchange’s accounts. Kraken chief security officer Nicholas Percoco claimed that an unnamed security team — not revealed to be CertiK at the time — had committed “extortion” by <a href="https://cointelegraph.com/news/kraken-claims-extortion-bug-bounty-report">refusing to return any funds</a> until the exchange agreed to provide “a speculated $ amount that this bug could have caused if they had not disclosed it.”
“After initial successful conversions on identifying and fixing the vulnerability, Kraken’s security operation team has THREATENED individual CertiK employees to repay a MISMATCHED amount of crypto in an UNREASONABLE time even WITHOUT providing repayment addresses,” <a href="https://x.com/CertiK/status/1803450205389402215" target="_blank" rel="noopener nofollow">said</a> CertiK. “In the spirit of transparency and our commitment to the Web3 community, we are going public to protect all users’ security. We urge [Kraken] to cease any threats against whitehat hackers.”
The security firm posted a timeline of events, starting with identifying the exploit on June 5 and ending with claims Kraken threatened a CertiK employee on June 18. In a statement to Cointelegraph, CertiK said it planned to transfer the funds “to an account that Kraken will be able to access.”&nbsp;
Related:&nbsp;<a href="https://cointelegraph.com/news/crypto-phishing-attacks-alarming-certik">Crypto phishing attacks reached ‘alarming levels’ — CertiK co-founder</a>
Initial reactions from many crypto users <a href="https://x.com/adamscochran/status/1803483232509501584" target="_blank" rel="noopener nofollow">seemed</a> to support Kraken, claiming that CertiK’s actions were not akin to white hat hackers. It’s unclear if Kraken has grounds for pursuing legal action.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/cc1ea051-12e7-4f1b-b646-02e4e3806280.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source:&nbsp;<a href="https://x.com/LefterisJP" target="_blank" rel="noopener nofollow"></a><a href="https://x.com/LefterisJP/status/1803475084792738283" target="_blank" rel="noopener nofollow">Lefteris Karapetsas</a>
 </figcaption>
</figure>
CertiK reported in April that there had been roughly $1 billion in digital assets <a href="https://cointelegraph.com/news/april-25m-exploits-scams-historical-low-certik">lost to illicit activity</a> in 2023. The firm has <a href="https://cointelegraph.com/news/certik-discovered-5-million-security-flaw-wormhole-bridge-aptos">previously identified vulnerabilities</a> in the Wormhole bridge on Aptos and the Telegram app.
Magazine: <a href="https://cointelegraph.com/magazine/defi-security-audits-bug-bounties-broken-heres-how-fix/">Crypto audits and bug bounties are broken: Here’s how to fix them</a>

CertiK identified Kraken exploit, claims exchange ‘threatened’ its team

Cointelegraph

Other articles published on Jun 19, 2024

Dogecoin Price Soars Amid Arthur Hayes’s Increasing Bets On DOGE, What’s Next?

Whale Investor Shifts 250k LINK Worth 3.72M to Kraken as Prices Fall 6%

AI Startup Aspecta Launches Builder Economy Network in Collaboration with BNB Chain (19 Jun)

3 Altcoins to Watch as Bitcoin Races Toward $100K: Fetch.ai, dogwifhat and Rebel Satoshi Arcade (...

Dell Is Building An AI Factory With Nvidia Set To Power Elon Musk’s xAI’s Grok

dYdX Launches Version 5.0.0 with Isolated Markets and LP Vaults

Join our free newsletter for daily crypto updates!