Always remember. Musk started as an Online Banker..
Now he's everyone's Fame Mom.. so far he's come. 

Wow just seeing these replies. Sorry to hear it. I never had any final response.. A lot of wasted time.

But they def. had a flaw in their 2FA recovery email response (that the other exchanges didn't have) I tried to help.. But unfortunately Kraken has "never been hacked"... and they're sticking to it...
I whitelist any exchange addresses when I have any hot wallets (which is basically never) out there. It's good practice.

Wow just seeing these replies. Sorry to hear it. I never followed up but they def. had a flaw in their 2FA recovery response (that the other exchanges didn't have) I tried to help.. But unfortunately Kraken has "never been hacked"... and they're sticking to it...

Realizing.. was I the first to suggest a Shibe to Mars..? Much Proud...

Ummmm.. and this should help... right?   Guess what's gonna be mandatory next..

https://cointelegraph.com/news/crypto-exchange-kraken-makes-2fa-mandatory-and-forms-new-security-lab

No other theories as to how I could have been hacked? Based on my responses I still don't see anything you've provided as a viable answer or providing any clarity to the situation.  Also curious to my points, the official emails sent from support@kraken.com, while being hacked, about my 2FA being bypassed and changed, yet my original login 2FA is still fully functional after being allowed back into my account. Is that not an anomaly, can you please answer this?  

My original warning still stands.

just to reiterate. I received zero answers/responses to any questions from Kraken through email or video chat after the hack.

2FA login/withdrawal enabled with Kraken. since 2015 for login. 2018 for withdrawal.

Emails not hacked and also 2FA protected. No IP intrusions on a private network.

Authenticator not static nor SMS based. 2FA on all emails, 2FA email separate from Kraken PW email. the two PWs also never touch same devices.

2FA key for Kraken, used for Authenticator placed in encrypted file, stays offline, and has not been touched for years.

No virus/keyloggers/Malware found

It's either.

A. I'm a liar and/or an idiot. (I have zero motive to talk nonsense about Kraken, could be user error, but haven't seen any evidence of that yet, and really the chain of emails from Kraken, while being hacked, would throw a lot of user error (phishing, PW exposure, etc. theories out the window, which is why I'm so persistent)

B. Authenticator App compromised. (again kept secure, in my possession, non sms, non static, separate email from anything Kraken, 2FA and no security incidents)

C. Login Email Compromised. ((again 2FA, activity log shows no foreign IP and email tech (one of the top email services) confirmed no one has hacked or been on my email accept me.))

D. Kraken is/was vulnerable and/or compromised, using insufficient security for members who ONLY use 2FA as an extra layer of security. (hopefully uniquely, but at best the internal investigation should not have been closed and me told to "file a police report" forcing me to make these questions public)

If anyone wants to chime in I'm all ears.. I'd love to be the guy who they say. "oh remember that guy who did a combination of stupid things never done before and lost all of a $100."  Much better than hearing it from someone losing much more later.

I won't say too much about what security measures I take only because I don't want that out in the wild,
I will PM some of these details to you.

I will say, I use a 2FA with a separate device that is not connected in anyway to my PW, everything regarding computer or devices are locked or 2FA, there's no other humans that could have physically infiltrated. and nothing touches each other. really all of this wouldn't account for the email chain I received as the hacker's infiltrated my account from Kraken (not phishing/spoof and even if they were, a reminder I only saw these after the hack had happened and I had made a service request from
https://www.kraken.com)

From Kraken, In order. on 1-27. (not the exact language of the emails, I'm abbreviating)

1.Username requested.
2.Password reset requested.
3. Alert Your password has been reset.
4. 2FA bypass requested.
5. Withdrawal Address requested (this would have required a whole new 2FA entry from a device only I Possess)
6. 2FA updated (strange how this was updated but my original 2FA still works now that my account has been unlocked)
7. Withdrawal requested.

Those 7 things were all done within 9 minutes per the emails received. Because I rarely use Kraken those emails were not seen by me at the time, and hidden amongst spam, etc., but really this done in 9 minutes is striking and with me in possession of my 2FA at the time.

I also never received an email confirming the withdrawal was made, which I'm pretty sure I've received in the past, the next email in the chain from kraken is my receipt of service request made.

All of this print screen evidence was provided in the ticket that was concluded as "internal investigation is complete" and with me to "file a police report". I should mention.

FWIW. I haven't even mentioned my PW being bypassed. Simply because I have to concede a password put in the wild IS possible, but is very highly unlikely, and to link it to this account/email/ and first request was a username?...  um.
And again. you know. 2FA

I do appreciate your response but the tone seems so much different then the last email reminding me of the obvious, "crypto transactions are designed to be irreversible", and a helpful, " file a police report" as if anyone should be concerned that their account was compromised/hacked with so much as a knowledge of an email? and 2FA enabled and bypassed?

Please understand, I didn't write 500+ words because I'm sore over $100. If someone was able to access my account on Kraken, which is 2FA enabled, and has been since 2015, (and still IS per my last login) without having access to my 2FA, there's much bigger issues here that would need to be discussed.

As far as providing you any more information about my ticket, I'd rather not, as I've now publicly outed this incident, if you'd like to provide ANY theories on how this could have happened with the security measures I've already discussed in place. I'd be more than willing to be helpful and converse with you about them privately.

As my original post was simply a warning to not use 2FA only with Kraken, I would like to thank you as you've seemed to solidify that by now recommending Master Key and GSL for use with Kraken, along with 2FA.

My recommendation is you make those mandatory. Soon.

This is a stern warning.  if you are still using Kraken. Without a doubt add any security features ON TOP of 2FA, now....(or whatever layers of security they're now saying you should use to be able to "use" their site confidently..like stones built on sand)....

Over the last week I've been trying to gain access to my Kraken account again, hadn't used for a month or two, it's been a process to say the least, culminating in a video chat review of me and my documents. etc. (which is somewhat alarming since their own security guidelines say they will "never ask you to download software", three emails in with their techs.... they asked me to "please download Zoom". anyways I did let them know that doesn't seem to fall in line with their own guidelines. lol)  Finally I was allowed access again tonight.

I went through the whole process just to gain access again (which I appreciate being extra secure, it's only laughable when seeing what little the hackers had to do to infiltrate my account without having my 2FA).

How this started, I noticed they updated the "look" of their site, a few days ago, so I decided to sign in to see the UI, I don't keep much coin on there, 100-150$ worth max.

"Account locked" weird. I submit a ticket which involves me answering a bunch of security questions.

It's at this point I decide to filter my older emails I received from Kraken, support@kraken.com, these were not spoofs nor phishing attempts, I never click links etc.

It turns out I had about 7 emails in a row on 1-27 while my kraken account was seemingly being hacked, and WITHOUT my 2FA. My 2FA has been enabled with Kraken since 2015.  The email chain starts with the hackers requesting my username.!!  wth.. I'm assuming all the hackers had was my email address at this point.

I of course go full lockdown, business class anti-virus check, malware, all nothing (I don't surf and click stuff, use nothing but hefty 100bit+ PWs etc.)

I then tried to communicate with the techs (fearing there might be a bug and people need to know what's up) but of course since my account was locked they wouldn't discuss anything.

I thought could my email been hacked?

Even though this wouldn't answer for the 2FA being bypassed with Kraken.. I never have my 2FA out of my possession.

Well...... my email also has 2FA and has zero logs from any IP other than mine. I also double-checked with the email provider tech, zero bad actor logins, only my IP, the IP used for every attempt with Kraken was different than mine, but always the same.

I've had back and forth with their tech with zero answers as to how my 2FA could have been bypassed and my funds withdrawn (both have 2FA enabled) and now feel obligated to let everyone know. This happened on 1-27 , so sorry for the delay but wasn't sure I was actually hacked until tonight when they restored my account and I could login and see it actually had been.

From their website I can see my 2FA is still enabled, wow, the funding 2FA is disabled, which goes along with the 2nd to last email which said funding would be locked for now...(really, do you think I'd be adding funds after this..)

they announced their entire website update on 1-29? could there have been a bug, something overlooked while transferring over, something in API? I honestly don't know but I would say to all users,

Proceed with absolute caution.!!!

Update from Kraken as I write this!....... The only answers/recourse Kraken has given me.... "file a police report". lol.  wow..

(Sidenote: May be part of the bug? In 2018 after some back and forth with their tech dept. as to why I couldn't fund my account any longer, I surmised I needed to add their "funding" 2FA as well. This was a bit frustrating because no one in tech nor on their website would answer if adding the 2FA "funding" option would affect my original 2FA I've had since 2015 and had used for funding many times. But it turns out that's all I needed to do and I could then do funding and my original 2FA also worked as always to login.)

Xpost from Reddit..   
I have no idea what to make of it.

http://www.reddit.com/r/Bitcoin/comments/2pvpfr/facebook_new_terms_update_for_2015_why_did_nobody/

Just letting others know,
I had a similar problem, everything worked well up until 8.8.2,  windows 7 64, this above helped to resolve it with one of my wallets, another wallet seemed to open but wouldn't handshake with the daemon, tried deleting everything but the wallet keys, saving, reopening bitmonerod, no spaces..etc. nothing. Again some wallets seemed to work, but some reason this one not.

Restarted computer. worked.  Try that if yours isn't working for whatever reason. Explanation, I have none. I don't think it was port or antivirus related.

Cool.  Thanks for keeping us updated wizkid057.

Mmm is CPPSRB running? I haven't shown any balance changes for 3 blocks now? Only reason I even noticed is I'm close to my payout balance. thanks!

This.
Although i've asked a couple times about transferring or buying/selling of aliases in the future, and so far have only read it's not possible, on the forum, perhaps it's something that can be implemented in the future,
I would like the ability to transfer alias from account to another, with a cost (even 0 NXT, with the smallest fee if possible) chosen by the sender.

I get that feeling too.

yes, my guess is they wanted the chain to sit more prominently on a disc, being a horizontal heavy design,
it's hard to accomplish otherwise,
edge to edge helps, but not great, either way it should be something finalized, with Hash or community.

People seem to be infatuated with putting logos on coins, with crypto-currency,
and since NXT isn't just a coin, perhaps just
not including it on one in branding could help.