Also, is there no email confirmation required for withdrawals on Kraken? That's typically a very basic security requirement that all exchanges employ. The OP says their email account was not compromised.
How can there not be? Kraken's
guide to request a withdrawal of any coin points out that a withdrawal can only be completed by clicking the confirmation link in the email sent to you.
OP, so you definitely checked the session history on your Gmail account and it shows nothing out of the ordinary? No strange IP ranges? If your email was compromised, that gives us one piece of the puzzle.
I do find it very troubling that it's
always Kraken who I'm hearing this about -- 2FA secured accounts being compromised.
I'm very curious to see Kraken's explanation after doing some investigation. They should know what exactly happened by the detail.
It sounds like Kraken plans to keep their lips sealed until a formal law enforcement investigation proceeds.
Did you file a police report yet, OP?