Bounty

Million

Security

<p><strong>Kraken</strong>, a prominent cryptocurrency exchange, recently faced a significant security breach involving its Bug Bounty program. The incident, detailed by <strong>Nick Percoco</strong>, Kraken’s Chief Security Officer, revealed on <a href="https://x.com/c7five/status/1803403565865771370" class="ek-link" rel="noopener noreferrer nofollow">X </a>that fraudulent actions by so-called “security researchers” led to nearly $3 million being withdrawn from the exchange’s treasuries.</p>
<h2 class="wp-block-heading" id="h-details-of-the-security-breach">Details of the Security Breach</h2>
<p>On June 9, 2024, Kraken received an alert from a security researcher claiming to have discovered an “extremely critical” bug. This bug purportedly allowed for the artificial inflation of account balances on the Kraken platform. The initial report, however, did not disclose detailed transaction information.</p>
<p>Percoco noted that the researcher shared the bug with two colleagues, who then exploited it to generate large sums of money. These individuals managed to withdraw nearly $3 million from Kraken’s treasuries. Crucially, no client assets were affected by this breach.</p>
<h2 class="wp-block-heading" id="h-kraken-s-response">Kraken’s Response</h2>
<p>In response to the partial disclosure, Kraken’s security team contacted the researchers to confirm details and arrange for the reward. This is standard procedure within Kraken’s Bug Bounty program, which has been in place for nearly ten years and is staffed by top experts in the field.</p>
<p>Kraken requested a full account of the activities, proof of concept, and the return of the withdrawn funds. The researchers, however, refused these requests and demanded a speculative amount in return for the bug’s potential impact had it not been disclosed. Percoco described this demand as extortion rather than legitimate white-hat hacking.</p>
<h2 class="wp-block-heading" id="h-kraken-s-position-and-future-steps">Kraken’s Position and Future Steps</h2>
<p>Kraken has clarified that their Bug Bounty program is designed to enhance security and relies on ethical behavior from researchers. According to Percoco, the actions of these researchers violated the rules of the program and constituted criminal behavior. Kraken is now treating this incident as a criminal case and coordinating with law enforcement agencies.</p>
<p>Percoco emphasized that this breach is an isolated incident and that Kraken remains committed to its Bug Bounty program. The exchange will continue to work with ethical researchers to improve the security of the cryptocurrency ecosystem.</p>
<p>Kraken’s transparency and swift action in this case underscore their commitment to protecting their platform and users, especially given that the stolen funds were from their treasury and not client funds. This incident also highlights the challenges of maintaining security in the rapidly evolving world of cryptocurrency.</p>
<p>The post <a href="https://www.unlock-bc.com/124822/kraken-security-breach-3-million-fraudulent-withdrawal/" rel="noopener noreferrer nofollow">Kraken Faces Security Breach: $3 Million Fraudulently Withdrawn</a> appeared first on <a href="https://www.unlock-bc.com" rel="noopener noreferrer nofollow">UNLOCK Blockchain</a>.</p>

Kraken Faces Security Breach: $3 Million Fraudulently Withdrawn

Table of Contents

UNLOCK_ENG

Other articles published on Jun 20, 2024

Breaking: Binance And Upbit Announce LayerZero (ZRO) Listing

Unpacking the Daily Mystery Box in Crypto Casinos

The Best Presale in 2024, $MBAG, Smashes $2.5M In 1 Month While Polkadot & BitBot Face Volatility...

Asia Mixed, Europe Markets Advance While Crude Hits $80 Again - Global Markets Today While US Slept

The Best Altcoin Presales – Discover the Next Cryptocurrency Gems of 2024

Players Earn in Mines of Dalarnia

Join our free newsletter for daily crypto updates!