3 ms·
Kraken claims it is being 'extorted' as hacker demands reward after $3M theft
- nradov 2y ago[flagged]
- r2_pilot 2y ago[flagged]
- wmf 2y agoCertik returned the money after this story came out: https://x.com/c7five/status/1803773589226995826 https://x.com/c7five/status/1803773589226995826
- koolba 2y agoThe timeline posted by Certik is interesting: https://x.com/CertiK/status/1803450205389402215 https://x.com/CertiK/status/1803450205389402215 So they found the bug, tested it with a series of increasing amounts, and then 8 hours after the last “larger amount test” let them Kraken know about the issue. Imagine being on the Kraken side and noticing the discrepancy during that window of time. Or even worse, them not knowing it.
- duxup 2y agoAt one point I worked with some folks who worked with security researcher / external security / bug reports from non customers. Everything I saw from actual independent security researchers was nothing like that story. Most of them just seemed like legitimately curious people who enjoyed trying things and just wanted a little recognition. Just putting their names in release notes or similar recognition seemed to make many of them very happy.
- talldayo 2y agoYou guys remember when Kraken extorted Glassdoor in an attempt to identify employees that disparaged them? https://www.theregister.com/2020/02/12/kracken_cryptocurrency_eff_glassdoor/ https://www.theregister.com/2020/02/12/kracken_cryptocurrenc... Karma has a nasty sense of humor. Better hope you're FDIC insure... oh, who am I kidding.
- ModernMech 2y agoI'm confused, that link says they used the legal system to issue a subpoena that was granted by a court. How is that extortion, which I understand to be extrajudicial? Or are you saying it's a kind of legal extortion?
- deleted 2y ago[deleted]
- wyck 2y agoWhat Certik did will be a case study in how to not disclose bugs, this was so poorly done it's been handed over to the authorities for possible illegal activity. https://x.com/c7five/status/1803403565865771370 https://x.com/c7five/status/1803403565865771370
- SV_BubbleTime 2y agoWho thought hat colors were immutable?
- Finnucane 2y ago"In ironic twist, ship of security researchers pull Kraken to bottom of sea."
- deleted 2y ago[deleted]
- deleted 2y ago[deleted]
- singularity2001 2y agoKraken is also currently sending account reconfirmation emails. I guess now is a good time to ignore them