Kraken Hack

REPORTED LOSS $10.5M
High Access Control bitcoin

What happened

A hacker exploited the illiquid BTC/CAD pair on Kraken, causing a 99% drop in the Bitcoin-to-Canadian Dollar (CAD) pair.

The attacker gained access to a compromised account with 1200BTC but was unable to withdraw. The attacker then placed his own limit of $100 buy orders on the illiquid BTC/CAD pair. Returning to the compromised account, the attacker dumped the 1200BTC on the BTC/CAD pair to himself, effectively becoming the legitimate owner of 1200BTC.

Case & protocol details

Classification CeFi / Access Control
Protocol Type CEX
Official Website www.kraken.com/
Protocol Twitter/X @krakensupport

Evidence & learning

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.