CertiK returns funds on its own terms after hacking Kraken for $3M
Notorious crypto audit firm CertiK’s security ‘researchers’ spent five days gaming Kraken’s systems before alerting the exchange, according to public statements from both companies Facing significant backlash from the crypto security community, CertiK claims to have returned the funds, despite apparently not having been provided with a repayment address. Although both companies have provided detailed statements on their own versions of events, some questions remain on both sides. Kraken’s chief security officer Nick Percoco took to X (formerly Twitter) to describe the highly irregular nature of the disclosure. The initial communication reported having generated a $4 discrepancy , which Percoco says would have been sufficient to qualify for Kraken’s bug bounty program. Kraken Security Update: On June 9 2024, we received a Bug Bounty program alert from a security researcher. No specifics were initially disclosed, but their email claimed to find an “extremely critic...