Tornado Cash

Tornado

The crypto community has heavily criticized blockchain security firm CertiK for its issues with the crypto exchange Kraken. On June 19, the company revealed itself as the ‘security research’ company Kraken had attributed a theft worth $3 million worth of digital assets to.&nbsp; 
Also read:<a href="https://www.cryptopolitan.com/kraken-accuses-company-of-extortion/"> Kraken reveals bug allowed rogue ‘security researchers’ to exploit $3M</a> 
Kraken’s chief security officer Nick Percoco had revealed that an unnamed “security researcher” had exploited a bug on the crypto exchange to steal millions in digital assets. Percoco continued that the researcher had refused to return the stolen funds and instead chose to extort the exchange for a speculative amount. 
<h2 id="kraken-recovers-stolen-funds">Kraken recovers stolen funds</h2> 
A few hours after Kraken’s revelation, CertiK stated that it had informed Kraken of the exploit that allowed it to withdraw the funds from the exchange’s accounts. The security firm posted a timeline of the events and claimed that Kraken threatened its employees. It stated: 
<blockquote>
 “After initial successful conversations on identifying and fixing the vulnerability, Kraken’s security operation team has THREATENED individual CertiK employees to repay a MISMATCHED amount of crypto in an UNREASONABLE time even WITHOUT providing repayment addresses.”
</blockquote> 
<figure id="attachment_544029" aria-describedby="caption-attachment-544029" style="width: 100%" class="wp-caption aligncenter">
 <img loading="lazy" decoding="async" class="wp-image-544029 size-full" src="https://www.cryptopolitan.com/wp-content/uploads/2024/06/GQcg17hXoAE5bEA.png" alt="CertiK Kraken" width="698" height="370" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/06/GQcg17hXoAE5bEA.png 698w, https://www.cryptopolitan.com/wp-content/uploads/2024/06/GQcg17hXoAE5bEA-300x159.png 300w" sizes="(max-width: 698px) 100vw, 698px">
 <figcaption id="caption-attachment-544029" class="wp-caption-text">
 CertiK’s Timeline of issues with Kraken. (Source: CertiK)
 </figcaption>
</figure> 
Nevertheless, CertiK revealed that it would transfer the “stolen” funds to an account that Kraken can access. By June 20, Percoco <a href="https://x.com/c7five/status/1803773589226995826?s=46" rel="nofollow" target="_blank">confirmed</a> that Kraken had received all the funds, less the transaction fees. 
<h2 style="text-align: left;" id="certik-s-actions-attract-criticism">CertiK’s actions attract criticism</h2> 
While Kraken would be celebrating fixing a critical bug and recovering funds, CertiK is now facing a barrage of criticism from the crypto community for its role in the events. Taylor Monahan, a crypto security expert, questioned why the blockchain security firm performed more than one test transaction to prove the existence of the vulnerability. 
Also read: <a href="https://www.cryptopolitan.com/kraken-consider-delisting-usdt-eu-regulation/">Kraken Considers Delisting USDT in Response to New EU Regulations</a> 
Furthermore, the community <a href="https://x.com/adamscochran/status/1803850046942908830" rel="nofollow" target="_blank">questioned</a> CertiK’s motive in moving some of the Kraken funds through the OFAC-sanctioned crypto mixer Tornado Cash and its use of ChangeNOW, a non-custodial crypto exchange with lax know-your-customers processes. 
However, CertiK <a href="https://x.com/certik/status/1803471653751423454?s=46" rel="nofollow" target="_blank">insists</a> that it made the right decision. The firm noted that its test lasted for five days and was on such a grand scale because it was trying to discover how weak the Kraken security system was. It stated: 
<blockquote>
 “The real question should be why Kraken’s in-depth defense system failed to detect so many test transactions. This is indeed what we were testing. You often heard from a weak exchange’s response to a security bug finding with a brag of their strong risk control and in-depth defense system (that they claim would prevent any significant loss). CertiK put this to the test with Kraken, and they failed miserably.”
</blockquote> 
It also denied ever asking for a bounty and claimed it consistently assured Kraken of its plan to return the funds.

Kraken recovers $3M as criticism mounts against CertiK

Table of Contents

Cryptopolitan_News

Other articles published on Jun 21, 2024

Indian Financial Agency Issues $2.25 Million Fine To Binance

Denko Mancheski Launches Reef Blockchain in 2019

Ether and altcoin price outlook positive after SEC drops investigation

Why Crypto Influencer Ignored Logan Paul’s NFT Lawsuit

Portal Brings Web3 Games to Mainstream Audiences

Binance Integrates Tether into Toncoin Network

Join our free newsletter for daily crypto updates!