At Kraken Security Labs, we try to discover attacks against crypto users before the bad guys do. The CoolBitX CoolWallet S is a credit-card sized wallet that pairs with mobile phone applications (both Android and iOS) via Bluetooth. We recently discovered the CoolWallet S Android…
A bug was recently discovered with Cloudflare, which Kraken and many other websites use for DoS protection and other services. Due to the nature of the bug, we recommend as a precaution that Kraken clients change their security credentials: Change your password Change your…
Heed this or perish. Let’s begin with the assumption that within 24 hours your usual mobile phone number will be hijacked by social engineers. They will use your number to gain access to every account you own that utilizes phone-based authentication and account recovery, like…
We have received many reports lately of clients falling victim to phishing sites appearing in the ads, above the organic search results, of all of the major search engines. Unfortunately, it seems to be easier to get an ad up than it is to have…
We have been alerted to multiple phishing attempts in the past 24 hours which appear to have been targeted at BitcoinTalk users. Anyone who received an email with the subject Mtgox.Claim assessment process should delete it and not click on the link it contains! This email…
Kraken is proud to announce a new partnership with BitGo, a leading provider of digital asset security. BitGo now integrates its multi-sig vault wallet system and robust security management controls with Kraken. Kraken had previously employed a custom off-chain, multi-party signing system with off-site components –…
2014 is considered by some to be the year of multi-sig, and we are happy to announce that Kraken supports payments to multi-signature Bitcoin addresses (addresses beginning with a ‘3’). Multi-sig features are built right into Bitcoin at the protocol level, offering a powerful free…
The first thing to understand about two-factor authentication is that you need it. For email or financial accounts, where security is of the utmost importance, two-factor authentication is essential because it greatly reduces the chance that the account will be compromised. The second thing to…