Consider a common scenario. A crypto investor is at work when he or she suddenly reads in the news that Bitcoin is about to “moon.” They want to increase their position, but cannot get home for several hours. Afraid of missing out on the opportunity,…
Kraken Security Labs has devised a way to extract seeds from both cryptocurrency hardware wallets offered from industry leader Trezor, the Trezor One and Trezor Model T. The attack requires just 15 minutes of physical access to the device. This is the first time that…
Kraken Security Labs has found a way to extract seeds from a KeepKey cryptocurrency hardware wallet. All that is required is physical access to the wallet for about 15 minutes. Here’s how we did it: This attack relies on voltage glitching to extract your encrypted…
Although much of the original KeepKey codebase is based on the Trezor One, their codebases have diverged. The KeepKey team added several mitigation mechanisms to make the KeepKey firmware resilient to the glitching attacks demonstrated during the Wallet.Fail talk at 35th Chaos Communications Congress; however,…
Learn how to better identify and protect yourself from crypto domain hijacking with Kraken Security Labs.
You already know that security is priority #1 at Kraken. We’ve talked at length about the many things we do here to stay paranoid in productive ways. This three-part guide will help you to do the same. Unproductive paranoia would be putting all of your…
I couldn’t be more excited to lead security efforts at one of the largest cryptocurrency exchanges on Earth. Kraken is the cryptocurrency market leader in security and our number one priority, above anything else, has always been to protect our clients. We’re announcing some major…
A bug was recently discovered with Cloudflare, which Kraken and many other websites use for DoS protection and other services. Due to the nature of the bug, we recommend as a precaution that Kraken clients change their security credentials: Change your password Change your…