Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

### Executive Summary Kraken disclosed that an "extremely critical" zero-day in its funding system allowed attackers to initiate deposits that credited accounts without completing them, enabling fabricated token creation and withdrawals totaling about $3M; the issue was identified and patched within 47 minutes and most funds were returned. The incident involves allegations that a third-party security firm (CertiK) performed testing that escalated into financial exploitation and subsequent extortion demands, while Kraken coordinated with law enforcement and remediated impact to user assets.