CertiK recently identified a series of critical vulnerabilities in @krakenfx exchange which could potentially lead to hundreds of millions of dollars in losses.
Starting from a finding in @krakenfx's deposit system where it may fail to differentiate between different internal transfer statuses, we conducted a thorough investigation with three key questions:
1/ Can a malicious actor fabricate a deposit transaction to a Kraken account?
2/ Can a malicious actor withdraw fabricated funds?
3/ What risk controls and asset protection might be triggered by a large withdrawal request?
According to our testing result: The Kraken exchange failed all these tests, indicating that Kraken’s defense in-depth-system is compromised on multiple fronts. Millions of dollars can be deposited to ANY Kraken account. A huge amount of fabricated crypto (worth more than 1M+ USD) can be withdrawn from the account and converted into valid cryptos. Worse yet, no alerts were triggered during the multi-day testing period. Kraken only responded and locked the test accounts days after we officially reported the incident.
Upon discovery, we informed Kraken, whose security team classified it as Critical: the most serious classification level at Kraken.
After initial successful conversions on identifying and fixing the vulnerability, Kraken’s security operation team has THREATENED individual CertiK employees to repay a MISMATCHED amount of crypto in an UNREASONABLE time even WITHOUT providing repayment addresses.
In the spirit of transparency and our commitment to the Web3 community, we are going public to protect all users' security. We urge @krakenfx to cease any threats against whitehat hackers.
Together, we can face risks and safeguard the future of Web3. #Web3 #Security #Transparency
Our Olympus just keeps getting stronger and stronger.
Let’s welcome our early backers
@toly (Co-Founder of Solana)
@Rewkang (Founder of Mechanism Capital)
@muneeb (Co-Founder of @Stacks)
Together, we will bring the Zeus network to become the most advanced Crosschain communication platform, shaping the future of cross-chain innovations
(1/6) What’s happening on @Solana these days. It’s not an DDoS network attack as many said. The network hasn’t lost consensus/neither halted, just slowed down to 1000 TPS on 4 occasions since Dec 9 (Thursday).
Announcing Whitelist for @Sonarwatch 🎉
Track your Solana assets conveniently without having to go to different platforms!
Whitelist ➡️ https://t.co/2uELDjehV0
IDO Guidelines ➡️ https://t.co/eVoP6tiwfS
🧪Fertilizer Update: CRP-USDC
📖 Whitelist for the CRP-USDC Fertilizer is now LIVE!
🎟️ Register to reserve your spot in the Community Farm and secure your lottery tickets!
Register now.🔽
Whitelist: https://t.co/2XwbP3CGnX
More details: https://t.co/n7dkyIzV65
@o2es llevo un día sin fibra con el router parpadeando en rojo. No me contestáis al correo, no me contestáis al whatsapp. He reiniciado el router. He reseteado el router. Nada sirve. No puedo trabajar sin internet. Necesito una solución.