<\/p>\n
A Kraken executive says that a black hat entity stole $3 million from the firm after finding a bug in the exchange\u2019s systems.<\/p>\n
In a lengthy thread on the social media platform X, Nick Percoco, Kraken\u2019s chief security officer, says<\/a> that earlier this month, Kraken received an update from their Bug Bounty program claiming there was an \u201cextremely critical\u201d bug that would allow hackers to artificially inflate their funds.<\/p>\n Says Percoco,<\/p>\n \u201cWithin minutes we discovered an isolated bug. This allowed a malicious attacker, under the right circumstances, to initiate a deposit onto our platform and receive funds in their account without fully completing the deposit. <\/em><\/p>\n To be clear, no client\u2019s assets were ever at risk. However, a malicious attacker could effectively print assets in their Kraken account for a period of time.\u201d <\/em><\/p>\n According to Percoco, after patching the bug, Kraken discovered that three accounts had used this flaw to their advantage. Eventually, through know-your-customer (KYC) forms, Kraken was able to link one of the accounts to a person who claimed to be a security expert.<\/p>\n However, instead of reporting<\/a> this exploit to Kraken, the individual allegedly told two other people, who went on to curate and withdraw nearly $3 million from their accounts.<\/p>\n Percoco goes on to allege<\/a> the person and his unnamed accomplices are refusing to give the money back, instead demanding the crypto exchange hand over a speculated amount of money that the bug would have caused had they not found it.<\/p>\n Bug bounty programs allow companies to offer compensation to individuals if they find and report bugs. Known as \u201cwhite-hat hackers,\u201d these bug hunters allow companies to protect themselves from hacks and exploits.<\/p>\n Percoco says<\/a> that taking advantage of Bug bounty programs to exploit firms makes one a criminal.<\/p>\n \u201cAs a security researcher, your license to \u2018hack\u2019 a company is enabled by following the simple rules of the bug bounty program you are participating in. Ignoring those rules and extorting the company revokes your \u2018license to hack.\u2019 It makes you, and your company, criminals.\u201d <\/em><\/p>\n Don’t Miss a Beat \u2013 Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em>  <\/p>\n Generate<\/span> Image: Midjourney<\/em><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":" A Kraken executive says that a black hat entity stole $3 million from the firm after finding a bug in the exchange\u2019s systems. In a lengthy thread on the social media platform X, Nick Percoco, Kraken\u2019s chief security officer, says that earlier this month, Kraken received an update from their Bug Bounty program claiming there […]<\/p>\n","protected":false},"author":2,"featured_media":327044,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[173],"tags":[201,248,251,246,257,255,250,252,247,253,249,256,254],"class_list":["post-327036","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-others","tag-blockchain","tag-bsc","tag-chainlink","tag-coin","tag-cryptocurrency","tag-gta","tag-looks-rare","tag-oracle","tag-polygon","tag-quickswap","tag-safe-moon","tag-wallet","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/327036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=327036"}],"version-history":[{"count":3,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/327036\/revisions"}],"predecessor-version":[{"id":327060,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/327036\/revisions\/327060"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/327044"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=327036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=327036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=327036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
\nCheck Price Action<\/a><\/span><\/em>
\n
\nFollow us on X<\/a>, Facebook<\/a> and Telegram<\/a><\/span><\/em>
\n
\nSurf The Daily Hodl Mix<\/a><\/span><\/em>
\n<\/p>\nDisclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n