Certik said it conducted "multi-day testing" and noted that the bug could be exploited to create millions of dollars worth of crypto. "Millions of dollars can be deposited to ANY Kraken account. A huge amount of fabricated crypto (worth more than 1M+ USD) can be withdrawn from the account and converted into valid cryptos. Worse yet, no alerts were triggered during the multi-day testing period," the post said.