Upon noticing this, I've changed the password of Kraken and email, deleted all API keys, and I contacted Kraken.
Thanks, since months I don't use any trading bot at all.
there you have it. Not the account was hacked (otherwise they would just withdraw everything), but they got your API Key.
So ask yourself who had access to those API Keys.